Approved changes feed: RSS · Atom

cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*

part: a version: 0.1.1.20 update: *

VendorTor (f7846514-9f02-5f6f-a3da-22faec4e8900)
ProductTor (f4891953-77d7-5a0d-b2e2-c887c0aa92ff)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/thetorproject/tor-media purl2cpe 2026-06-01 10:17:00.078709

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4897 vulnerable 2026-06-08 04:59:33.631385 Details available
Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-16T16:53:14.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4896 vulnerable 2026-06-08 04:59:33.626073 Details available
Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-16T18:28:19.118Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4895 vulnerable 2026-06-08 04:59:33.598898 Details available
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-17T01:55:32.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4894 vulnerable 2026-06-08 04:59:33.491748 Details available
Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-09-16T20:48:21.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2778 vulnerable 2026-06-08 04:58:09.245766 Details available
Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration.
Published: 2011-12-23T02:00:00.000Z
Updated: 2024-08-06T23:15:31.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2769 vulnerable 2026-06-08 04:58:09.181392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2768 vulnerable 2026-06-08 04:58:09.135801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1924 vulnerable 2026-06-08 04:58:02.880065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0493 vulnerable 2026-06-08 04:56:37.488254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0492 vulnerable 2026-06-08 04:56:37.483462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0491 vulnerable 2026-06-08 04:56:37.478270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0490 vulnerable 2026-06-08 04:56:37.473330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0427 vulnerable 2026-06-08 04:56:37.048403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0016 vulnerable 2026-06-08 04:56:33.353348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0015 vulnerable 2026-06-08 04:56:33.269188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1676 vulnerable 2026-06-08 04:54:09.875543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0385 vulnerable 2026-06-08 04:52:02.106157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0383 vulnerable 2026-06-08 04:52:02.073869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2426 vulnerable 2026-06-08 04:51:28.446711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0414 vulnerable 2026-06-08 04:51:09.324175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5398 vulnerable 2026-06-08 04:50:51.372780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5397 vulnerable 2026-06-08 04:50:51.363617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4099 vulnerable 2026-06-08 04:49:55.669950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4098 vulnerable 2026-06-08 04:49:55.669307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4097 vulnerable 2026-06-08 04:49:55.668538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4096 vulnerable 2026-06-08 04:49:55.666126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3165 vulnerable 2026-06-08 04:49:53.379596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4508 vulnerable 2026-06-08 04:49:18.067854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.