Approved changes feed: RSS · Atom

cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*

part: a version: 0.0.9.1 update: *

VendorTor (f7846514-9f02-5f6f-a3da-22faec4e8900)
ProductTor (f4891953-77d7-5a0d-b2e2-c887c0aa92ff)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/thetorproject/tor-media purl2cpe 2026-06-01 10:17:00.036961

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4897 vulnerable 2026-06-08 04:59:33.630324 Details available
Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-16T16:53:14.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4896 vulnerable 2026-06-08 04:59:33.625086 Details available
Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-16T18:28:19.118Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4895 vulnerable 2026-06-08 04:59:33.597878 Details available
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-17T01:55:32.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4894 vulnerable 2026-06-08 04:59:33.457923 Details available
Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-16T20:48:21.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2778 vulnerable 2026-06-08 04:58:09.244726 Details available
Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-08-06T23:15:31.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2769 vulnerable 2026-06-08 04:58:09.180352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2768 vulnerable 2026-06-08 04:58:09.134570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1924 vulnerable 2026-06-08 04:58:02.836620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0493 vulnerable 2026-06-08 04:56:37.487248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0492 vulnerable 2026-06-08 04:56:37.482174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0491 vulnerable 2026-06-08 04:56:37.477283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0490 vulnerable 2026-06-08 04:56:37.472275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0427 vulnerable 2026-06-08 04:56:37.047329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0016 vulnerable 2026-06-08 04:56:33.352278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0015 vulnerable 2026-06-08 04:56:33.230042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1676 vulnerable 2026-06-08 04:54:09.872292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0385 vulnerable 2026-06-08 04:52:02.104990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0383 vulnerable 2026-06-08 04:52:02.041883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0414 vulnerable 2026-06-08 04:51:09.294770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5398 vulnerable 2026-06-08 04:50:51.371584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5397 vulnerable 2026-06-08 04:50:51.329770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3165 vulnerable 2026-06-08 04:49:53.367528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3419 vulnerable 2026-06-08 04:49:09.203656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3418 vulnerable 2026-06-08 04:49:09.199466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3417 vulnerable 2026-06-08 04:49:09.196997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3416 vulnerable 2026-06-08 04:49:09.193882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3415 vulnerable 2026-06-08 04:49:09.175551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3414 vulnerable 2026-06-08 04:49:09.173588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3413 vulnerable 2026-06-08 04:49:09.171813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3412 vulnerable 2026-06-08 04:49:09.169947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3411 vulnerable 2026-06-08 04:49:09.168130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3410 vulnerable 2026-06-08 04:49:09.166367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3409 vulnerable 2026-06-08 04:49:09.164544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3408 vulnerable 2026-06-08 04:49:09.162717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3407 vulnerable 2026-06-08 04:49:09.142578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0414 vulnerable 2026-06-08 04:48:53.766556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2643 vulnerable 2026-06-08 04:48:29.993973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2050 vulnerable 2026-06-08 04:48:28.182145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.