Torproject Tor 0.3.0.6

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:torproject:tor:0.3.0.6:*:*:*:*:*:*:*

part: a version: 0.3.0.6 update: *

VendorTorproject (afa7dfd2-d927-5903-8be5-17975f0a6575)
ProductTor (7218de4e-744e-5b99-80a0-16fcf16b33ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/torproject/tor purl2cpe 2026-06-01 10:12:23.353135
pkg:torproject/tor purl2cpe 2026-06-01 10:12:23.353136

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-0380 vulnerable 2026-06-08 05:08:26.070669 Details available
The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to the log files of a hidden service, because uninitialized stack data is included in an error message about construction of an introduction point circuit.
Published: 2017-09-18T16:00:00.000Z
Updated: 2024-08-05T13:03:57.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0377 vulnerable 2026-06-08 05:08:26.053473 Details available
Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families.
Published: 2017-07-02T15:00:00.000Z
Updated: 2024-08-05T13:03:56.989Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.