CVE-2009-2425
published 2009-07-10CVE-2009-2425: Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed router descriptor.
medium5CVSS 3.1
AVNACLAuNCNINAP
Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed router descriptor.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tor | < tor 0.2.0.35-1 (bookworm) | tor 0.2.0.35-1 (bookworm) |
| tor | tor | — | — |
| torproject | tor | >= 0 < 0.2.0.35-1 | 0.2.0.35-1 |
| torproject | tor | >= 0 < 0.2.0.35-1 | 0.2.0.35-1 |
| torproject | tor | >= 0 < 0.2.0.35-1 | 0.2.0.35-1 |
| torproject | tor | >= 0 < 0.2.0.35-1 | 0.2.0.35-1 |
CVSS provenance
nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM