CVE-2009-0938 — TOR vulnerability

10 documents7 sources
Severity
5.0MEDIUMNVD
EPSS
0.7%
top 27.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Torproject TORTOR
Timeline
PublishedMar 18
Latest updateMay 2

Description

Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via "malformed input."

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶Debiantorproject/tor< 0.2.0.34-1+3
▶NVDtor/tor0.2.0.33+29

Patches

Patch: archives.seul.org ↗Patch: archives.seul.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-p3mc-whjq-822x: Unspecified vulnerability in Tor before 0↗2022-05-02
▶
CVEList
CVE-2009-0938: Unspecified vulnerability in Tor before 0↗2009-03-18
▶
OSV
CVE-2009-0938: Unspecified vulnerability in Tor before 0↗2009-03-18
▶

📋Vendor Advisories

5
Debian
CVE-2009-0938: tor - Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cau...↗2009
▶
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗
▶
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗
▶
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗
▶
Red Hat
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗
▶

💬Community

1
Bugzilla
tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)↗2009-02-11
▶
CVE-2009-0938 — TOR vulnerability | cvebase