CVE-2009-2426
published 2009-07-10CVE-2009-2426: The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to…
PriorityP420medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.92%
77.8th percentile
The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information.
Affected
99 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tor | < tor 0.2.0.35-1 (bookworm) | tor 0.2.0.35-1 (bookworm) |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
| tor | tor | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r3c9-qr4c-gm4p: The connection_edge_process_relay_cell_not_open function in src/or/relay
ghsa_unreviewed·2022-05-02
CVE-2009-2426 [MEDIUM] GHSA-r3c9-qr4c-gm4p: The connection_edge_process_relay_cell_not_open function in src/or/relay
The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information.
OSV
CVE-2009-2426: The connection_edge_process_relay_cell_not_open function in src/or/relay
osv·2009-07-10·CVSS 5.0
CVE-2009-2426 [MEDIUM] CVE-2009-2426: The connection_edge_process_relay_cell_not_open function in src/or/relay
The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information.
Debian
CVE-2009-2426: tor - The connection_edge_process_relay_cell_not_open function in src/or/relay.c in To...
vendor_debian·2009·CVSS 5.0
CVE-2009-2426 [MEDIUM] CVE-2009-2426: tor - The connection_edge_process_relay_cell_not_open function in src/or/relay.c in To...
The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information.
Scope: local
bookworm: resolved (fixed in 0.2.0.35-1)
bullseye: resolved (fixed in 0.2.0.35-1)
forky: resolved (fixed in 0.2.0.35-1)
sid: resolved (fixed in 0.2.0.35-1)
trixie: resolved (fixed in 0.2.0.35-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://archives.seul.org/or/announce/Jun-2009/msg00000.htmlhttp://secunia.com/advisories/35546http://www.osvdb.org/55341http://www.securityfocus.com/bid/35505http://www.vupen.com/english/advisories/2009/1716https://exchange.xforce.ibmcloud.com/vulnerabilities/51377http://archives.seul.org/or/announce/Jun-2009/msg00000.htmlhttp://secunia.com/advisories/35546http://www.osvdb.org/55341http://www.securityfocus.com/bid/35505http://www.vupen.com/english/advisories/2009/1716https://exchange.xforce.ibmcloud.com/vulnerabilities/51377
2009-07-10
Published