Torproject Tor 0.2.3.21 Release Candidate
Approved changes feed: RSS · Atom
cpe:2.3:a:torproject:tor:0.2.3.21:rc:*:*:*:*:*:*part: a version: 0.2.3.21 update: rc
| Vendor | Torproject (afa7dfd2-d927-5903-8be5-17975f0a6575) |
|---|---|
| Product | Tor (7218de4e-744e-5b99-80a0-16fcf16b33ad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/torproject/tor |
purl2cpe | 2026-06-01 10:12:23.352769 |
pkg:torproject/tor |
purl2cpe | 2026-06-01 10:12:23.352770 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-5117 |
vulnerable | 2026-06-08 05:05:46.978245 |
Details available
Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAY_EARLY cells as a means of communicating information about hidden service names.
Published: 2014-07-30T16:00:00.000Z
Updated: 2024-08-06T11:34:37.419Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5573 |
vulnerable | 2026-06-08 05:02:57.353838 |
Details available
The connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell arrives, which might allow remote attackers to cause a denial of service (memory consumption or excessive cell reception rate) or bypass intended flow-control restrictions via a RELAY_COMMAND_SENDME command.
Published: 2013-01-01T11:00:00.000Z
Updated: 2024-08-06T21:14:16.375Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4922 |
vulnerable | 2026-06-08 05:02:53.269230 |
Details available
The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419.
Published: 2012-09-14T18:00:00.000Z
Updated: 2024-08-06T20:50:18.010Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2250 |
vulnerable | 2026-06-08 05:02:03.038841 |
Details available
Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by performing link protocol negotiation incorrectly.
Published: 2014-02-03T02:00:00.000Z
Updated: 2024-08-06T19:26:09.024Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2249 |
vulnerable | 2026-06-08 05:02:03.036180 |
Details available
Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a renegotiation attempt that occurs after the initiation of the V3 link protocol.
Published: 2014-02-03T02:00:00.000Z
Updated: 2024-08-06T19:26:08.981Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.