Debian tor 0.2.9.11-1
Approved changes feed: RSS · Atom
cpe:2.3:a:debian:tor:0.2.9.11-1:*:*:*:*:*:*:*
part: a version: 0.2.9.11-1 update: *
| Vendor | Debian (4199fb5b-36f6-5ceb-83d5-855460345e36) |
|---|---|
| Product | Tor (65dee133-6ba8-5144-bda9-cb6cecabd141) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/eliteraspberries/tor |
purl2cpe | 2026-06-01 10:17:13.653442 |
pkg:deb/debian/tor |
purl2cpe | 2026-06-01 10:17:13.653445 |
pkg:deb/ubuntu/tor |
purl2cpe | 2026-06-01 10:17:13.653447 |
pkg:github/torproject/tor |
purl2cpe | 2026-06-01 10:17:13.653450 |
pkg:rpm/fedora/tor |
purl2cpe | 2026-06-01 10:17:13.653453 |
pkg:rpm/opensuse/tor |
purl2cpe | 2026-06-01 10:17:13.653455 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-11565 |
vulnerable | 2026-06-08 05:08:38.132283 |
Details available
debian/tor.init in the Debian tor_0.2.9.11-1~deb9u1 package for Tor was designed to execute aa-exec from the standard system pathname if the apparmor package is installed, but implements this incorrectly (with a wrong assumption that the specific pathname would remain the same forever), which allows attackers to bypass intended AppArmor restrictions by leveraging the silent loss of this protection mechanism. NOTE: this does not affect systems, such as default Debian stretch installations, on which Tor startup relies on a systemd unit file (instead of this tor.init script).
Published: 2017-07-23T20:00:00.000Z
Updated: 2024-08-05T18:12:40.353Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.