cbcvebase.
CVE-2009-0939
published 2009-03-18

CVE-2009-0939: Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using…

critical10CVSS 3.1
AVNACLAuNCCICAC
Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
debiantor< tor 0.2.0.34-1 (bookworm)tor 0.2.0.34-1 (bookworm)
tortor<= 0.2.0.33—
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——
tortor——

CVSS provenance

nvd10.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL