GCVE - cpe:2.3:a:tor:tor:0.2.2.29:beta:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tor:tor:0.2.2.29:beta:*:*:*:*:*:*

part: a version: 0.2.2.29 update: beta

Vendor	Tor (`f7846514-9f02-5f6f-a3da-22faec4e8900`)
Product	Tor (`f4891953-77d7-5a0d-b2e2-c887c0aa92ff`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/thetorproject/tor-media`	purl2cpe	2026-06-01 10:17:00.230014

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4895`	vulnerable	2026-06-08 04:59:33.602020	Details available Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building. Published: 2011-12-23T02:00:00.000Z Updated: 2024-09-17T01:55:32.706Z Open on db.gcve.eu Reference links https://blog.torproject.org/blog/tor-02234-released-security-patches	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4894`	vulnerable	2026-06-08 04:59:33.595314	Details available Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections. Published: 2011-12-23T02:00:00.000Z Updated: 2024-09-16T20:48:21.454Z Open on db.gcve.eu Reference links https://blog.torproject.org/blog/tor-02234-released-security-patches	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2778`	vulnerable	2026-06-08 04:58:09.248281	Details available Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration. Published: 2011-12-23T02:00:00.000Z Updated: 2024-08-06T23:15:31.127Z Open on db.gcve.eu Reference links https://blog.torproject.org/blog/tor-02235-released-security-patches http://www.debian.org/security/2011/dsa-2363	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2769`	vulnerable	2026-06-08 04:58:09.183933	Details available Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values. Published: 2011-12-23T02:00:00.000Z Updated: 2024-08-06T23:15:30.687Z Open on db.gcve.eu Reference links https://blog.torproject.org/blog/tor-02234-released-security-patches http://www.debian.org/security/2011/dsa-2331	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2768`	vulnerable	2026-06-08 04:58:09.177972	Details available Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had selected. Published: 2011-12-23T02:00:00.000Z Updated: 2024-08-06T23:15:30.714Z Open on db.gcve.eu Reference links https://blog.torproject.org/blog/tor-02234-released-security-patches http://www.debian.org/security/2011/dsa-2331	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Tor

Notes

PURL mappings

Vulnerability references

Contribute