CVE-2009-0939 - tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)

Back Back to CVE browser

HIGH

tor: multiple security fixes in 0.2.0.34 (CVE-2009-0936, CVE-2009-0937, CVE-2009-0938, CVE-2009-0939)

Published Mar 18, 2009

10.0

HIGH

CVSS 2.0

EPSS 2.05%

Description

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://archives.seul.org/or/announce/Feb-2009/msg00000.html
mailing-listx_refsource_MLIST
http://secunia.com/advisories/33880
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/34583
third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200904-11.xml
vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/33713
vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2009-0939
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=485021
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0936
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2009-0939
https://www.cve.org/CVERecord?id=CVE-2009-0939

Link	Providers	Tags
http://archives.seul.org/or/announce/Feb-2009/msg00000.html		mailing-listx_refsource_MLIST
http://secunia.com/advisories/33880		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/34583		third-party-advisoryx_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200904-11.xml		vendor-advisoryx_refsource_GENTOO
http://www.securityfocus.com/bid/33713		vdb-entryx_refsource_BID
https://access.redhat.com/security/cve/CVE-2009-0939		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=485021		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0936		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2009-0939
https://www.cve.org/CVERecord?id=CVE-2009-0939