CVEvulnerability

CVE-2009-0939

10.0 HIGH Published 2009-03-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-03-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0.

Affected configurations

• tor tor (<= 0.2.0.33) • tor tor 0.2.0.1 • tor tor 0.2.0.2 • tor tor 0.2.0.3 • tor tor 0.2.0.4 • tor tor 0.2.0.5 • tor tor 0.2.0.6 • tor tor 0.2.0.10 • tor tor 0.2.0.11 • tor tor 0.2.0.12 • tor tor 0.2.0.13 • tor tor 0.2.0.14 • tor tor 0.2.0.15 • tor tor 0.2.0.16 • tor tor 0.2.0.17 • tor tor 0.2.0.18 • tor tor 0.2.0.19 • tor tor 0.2.0.20 • tor tor 0.2.0.21 • tor tor 0.2.0.22 • tor tor 0.2.0.23 • tor tor 0.2.0.24 • tor tor 0.2.0.25 • tor tor 0.2.0.26 • tor tor 0.2.0.27 • tor tor 0.2.0.28 • tor tor 0.2.0.29 • tor tor 0.2.0.30 • tor tor 0.2.0.31 • tor tor 0.2.0.32

References