Read the docs
TI-2012-04160 Aliases CVE-2012-4922GHSA-h4mc-jpwx-rjgp

The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before…

Priority LOW 27CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed directory object, a different vulnerability than CVE-2012-4419.

Why it matters now

EPSS 0.02233 82nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 96

CPEVersionsRoleVendor
cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*up to 0.2.2.38Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:*:*:*:*:*:*:*0.0.2Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre13:*:*:*:*:*:*0.0.2 pre13Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre14:*:*:*:*:*:*0.0.2 pre14Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre15:*:*:*:*:*:*0.0.2 pre15Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre16:*:*:*:*:*:*0.0.2 pre16Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre17:*:*:*:*:*:*0.0.2 pre17Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre18:*:*:*:*:*:*0.0.2 pre18Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre19:*:*:*:*:*:*0.0.2 pre19Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre20:*:*:*:*:*:*0.0.2 pre20Vulnerabletorproject
  • cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:* Versions up to 0.2.2.38 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:*:*:*:*:*:*:* Versions 0.0.2 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre13:*:*:*:*:*:* Versions 0.0.2 pre13 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre14:*:*:*:*:*:* Versions 0.0.2 pre14 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre15:*:*:*:*:*:* Versions 0.0.2 pre15 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre16:*:*:*:*:*:* Versions 0.0.2 pre16 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre17:*:*:*:*:*:* Versions 0.0.2 pre17 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre18:*:*:*:*:*:* Versions 0.0.2 pre18 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre19:*:*:*:*:*:* Versions 0.0.2 pre19 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre20:*:*:*:*:*:* Versions 0.0.2 pre20 Vulnerable ·torproject
Show 86 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:torproject:tor:0.0.2:pre21:*:*:*:*:*:*0.0.2 pre21Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre22:*:*:*:*:*:*0.0.2 pre22Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre23:*:*:*:*:*:*0.0.2 pre23Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre24:*:*:*:*:*:*0.0.2 pre24Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre25:*:*:*:*:*:*0.0.2 pre25Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre26:*:*:*:*:*:*0.0.2 pre26Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre27:*:*:*:*:*:*0.0.2 pre27Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.3:*:*:*:*:*:*:*0.0.3Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.4:*:*:*:*:*:*:*0.0.4Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.5:*:*:*:*:*:*:*0.0.5Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.6:*:*:*:*:*:*:*0.0.6Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.6.1:*:*:*:*:*:*:*0.0.6.1Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.6.2:*:*:*:*:*:*:*0.0.6.2Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.7:*:*:*:*:*:*:*0.0.7Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.7.1:*:*:*:*:*:*:*0.0.7.1Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.7.2:*:*:*:*:*:*:*0.0.7.2Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.7.3:*:*:*:*:*:*:*0.0.7.3Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.8.1:*:*:*:*:*:*:*0.0.8.1Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.1:*:*:*:*:*:*:*0.0.9.1Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.2:*:*:*:*:*:*:*0.0.9.2Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.3:*:*:*:*:*:*:*0.0.9.3Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.4:*:*:*:*:*:*:*0.0.9.4Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.5:*:*:*:*:*:*:*0.0.9.5Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.6:*:*:*:*:*:*:*0.0.9.6Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.7:*:*:*:*:*:*:*0.0.9.7Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.8:*:*:*:*:*:*:*0.0.9.8Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.9:*:*:*:*:*:*:*0.0.9.9Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.10:*:*:*:*:*:*:*0.0.9.10Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.10:*:*:*:*:*:*:*0.1.0.10Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.11:*:*:*:*:*:*:*0.1.0.11Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.12:*:*:*:*:*:*:*0.1.0.12Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.13:*:*:*:*:*:*:*0.1.0.13Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.14:*:*:*:*:*:*:*0.1.0.14Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.15:*:*:*:*:*:*:*0.1.0.15Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.16:*:*:*:*:*:*:*0.1.0.16Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.17:*:*:*:*:*:*:*0.1.0.17Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.20:*:*:*:*:*:*:*0.1.1.20Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.21:*:*:*:*:*:*:*0.1.1.21Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.22:*:*:*:*:*:*:*0.1.1.22Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.23:*:*:*:*:*:*:*0.1.1.23Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.24:*:*:*:*:*:*:*0.1.1.24Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.25:*:*:*:*:*:*:*0.1.1.25Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.26:*:*:*:*:*:*:*0.1.1.26Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.13:*:*:*:*:*:*:*0.1.2.13Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.14:*:*:*:*:*:*:*0.1.2.14Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.15:*:*:*:*:*:*:*0.1.2.15Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.16:*:*:*:*:*:*:*0.1.2.16Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.17:*:*:*:*:*:*:*0.1.2.17Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.18:*:*:*:*:*:*:*0.1.2.18Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.19:*:*:*:*:*:*:*0.1.2.19Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.30:*:*:*:*:*:*:*0.2.0.30Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.31:*:*:*:*:*:*:*0.2.0.31Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.32:*:*:*:*:*:*:*0.2.0.32Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.33:*:*:*:*:*:*:*0.2.0.33Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.34:*:*:*:*:*:*:*0.2.0.34Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.35:*:*:*:*:*:*:*0.2.0.35Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.18:*:*:*:*:*:*:*0.2.2.18Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.19:*:*:*:*:*:*:*0.2.2.19Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.20:*:*:*:*:*:*:*0.2.2.20Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.21:*:*:*:*:*:*:*0.2.2.21Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.22:*:*:*:*:*:*:*0.2.2.22Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.23:*:*:*:*:*:*:*0.2.2.23Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.24:*:*:*:*:*:*:*0.2.2.24Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.25:*:*:*:*:*:*:*0.2.2.25Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.26:*:*:*:*:*:*:*0.2.2.26Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.27:*:*:*:*:*:*:*0.2.2.27Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.28:*:*:*:*:*:*:*0.2.2.28Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.29:*:*:*:*:*:*:*0.2.2.29Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.30:*:*:*:*:*:*:*0.2.2.30Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.31:*:*:*:*:*:*:*0.2.2.31Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.32:*:*:*:*:*:*:*0.2.2.32Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.33:*:*:*:*:*:*:*0.2.2.33Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.34:*:*:*:*:*:*:*0.2.2.34Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.35:*:*:*:*:*:*:*0.2.2.35Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.36:*:*:*:*:*:*:*0.2.2.36Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.37:*:*:*:*:*:*:*0.2.2.37Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3:*:*:*:*:*:*:*0.2.3Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.13:alpha:*:*:*:*:*:*0.2.3.13 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.14:alpha:*:*:*:*:*:*0.2.3.14 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.15:alpha:*:*:*:*:*:*0.2.3.15 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.16:alpha:*:*:*:*:*:*0.2.3.16 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.17:beta:*:*:*:*:*:*0.2.3.17 betaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.18:rc:*:*:*:*:*:*0.2.3.18 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.19:rc:*:*:*:*:*:*0.2.3.19 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.20:rc:*:*:*:*:*:*0.2.3.20 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.21:rc:*:*:*:*:*:*0.2.3.21 rcVulnerabletorproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre21:*:*:*:*:*:* Versions 0.0.2 pre21 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre22:*:*:*:*:*:* Versions 0.0.2 pre22 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre23:*:*:*:*:*:* Versions 0.0.2 pre23 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre24:*:*:*:*:*:* Versions 0.0.2 pre24 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre25:*:*:*:*:*:* Versions 0.0.2 pre25 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre26:*:*:*:*:*:* Versions 0.0.2 pre26 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre27:*:*:*:*:*:* Versions 0.0.2 pre27 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.3:*:*:*:*:*:*:* Versions 0.0.3 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.4:*:*:*:*:*:*:* Versions 0.0.4 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.5:*:*:*:*:*:*:* Versions 0.0.5 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.6:*:*:*:*:*:*:* Versions 0.0.6 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.6.1:*:*:*:*:*:*:* Versions 0.0.6.1 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.6.2:*:*:*:*:*:*:* Versions 0.0.6.2 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.7:*:*:*:*:*:*:* Versions 0.0.7 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.7.1:*:*:*:*:*:*:* Versions 0.0.7.1 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.7.2:*:*:*:*:*:*:* Versions 0.0.7.2 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.7.3:*:*:*:*:*:*:* Versions 0.0.7.3 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.8.1:*:*:*:*:*:*:* Versions 0.0.8.1 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.1:*:*:*:*:*:*:* Versions 0.0.9.1 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.2:*:*:*:*:*:*:* Versions 0.0.9.2 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.3:*:*:*:*:*:*:* Versions 0.0.9.3 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.4:*:*:*:*:*:*:* Versions 0.0.9.4 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.5:*:*:*:*:*:*:* Versions 0.0.9.5 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.6:*:*:*:*:*:*:* Versions 0.0.9.6 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.7:*:*:*:*:*:*:* Versions 0.0.9.7 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.8:*:*:*:*:*:*:* Versions 0.0.9.8 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.9:*:*:*:*:*:*:* Versions 0.0.9.9 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.10:*:*:*:*:*:*:* Versions 0.0.9.10 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.10:*:*:*:*:*:*:* Versions 0.1.0.10 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.11:*:*:*:*:*:*:* Versions 0.1.0.11 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.12:*:*:*:*:*:*:* Versions 0.1.0.12 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.13:*:*:*:*:*:*:* Versions 0.1.0.13 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.14:*:*:*:*:*:*:* Versions 0.1.0.14 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.15:*:*:*:*:*:*:* Versions 0.1.0.15 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.16:*:*:*:*:*:*:* Versions 0.1.0.16 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.17:*:*:*:*:*:*:* Versions 0.1.0.17 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.20:*:*:*:*:*:*:* Versions 0.1.1.20 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.21:*:*:*:*:*:*:* Versions 0.1.1.21 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.22:*:*:*:*:*:*:* Versions 0.1.1.22 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.23:*:*:*:*:*:*:* Versions 0.1.1.23 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.24:*:*:*:*:*:*:* Versions 0.1.1.24 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.25:*:*:*:*:*:*:* Versions 0.1.1.25 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.26:*:*:*:*:*:*:* Versions 0.1.1.26 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.13:*:*:*:*:*:*:* Versions 0.1.2.13 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.14:*:*:*:*:*:*:* Versions 0.1.2.14 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.15:*:*:*:*:*:*:* Versions 0.1.2.15 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.16:*:*:*:*:*:*:* Versions 0.1.2.16 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.17:*:*:*:*:*:*:* Versions 0.1.2.17 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.18:*:*:*:*:*:*:* Versions 0.1.2.18 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.19:*:*:*:*:*:*:* Versions 0.1.2.19 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.30:*:*:*:*:*:*:* Versions 0.2.0.30 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.31:*:*:*:*:*:*:* Versions 0.2.0.31 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.32:*:*:*:*:*:*:* Versions 0.2.0.32 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.33:*:*:*:*:*:*:* Versions 0.2.0.33 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.34:*:*:*:*:*:*:* Versions 0.2.0.34 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.35:*:*:*:*:*:*:* Versions 0.2.0.35 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.18:*:*:*:*:*:*:* Versions 0.2.2.18 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.19:*:*:*:*:*:*:* Versions 0.2.2.19 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.20:*:*:*:*:*:*:* Versions 0.2.2.20 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.21:*:*:*:*:*:*:* Versions 0.2.2.21 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.22:*:*:*:*:*:*:* Versions 0.2.2.22 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.23:*:*:*:*:*:*:* Versions 0.2.2.23 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.24:*:*:*:*:*:*:* Versions 0.2.2.24 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.25:*:*:*:*:*:*:* Versions 0.2.2.25 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.26:*:*:*:*:*:*:* Versions 0.2.2.26 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.27:*:*:*:*:*:*:* Versions 0.2.2.27 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.28:*:*:*:*:*:*:* Versions 0.2.2.28 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.29:*:*:*:*:*:*:* Versions 0.2.2.29 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.30:*:*:*:*:*:*:* Versions 0.2.2.30 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.31:*:*:*:*:*:*:* Versions 0.2.2.31 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.32:*:*:*:*:*:*:* Versions 0.2.2.32 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.33:*:*:*:*:*:*:* Versions 0.2.2.33 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.34:*:*:*:*:*:*:* Versions 0.2.2.34 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.35:*:*:*:*:*:*:* Versions 0.2.2.35 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.36:*:*:*:*:*:*:* Versions 0.2.2.36 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.37:*:*:*:*:*:*:* Versions 0.2.2.37 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3:*:*:*:*:*:*:* Versions 0.2.3 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.13:alpha:*:*:*:*:*:* Versions 0.2.3.13 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.14:alpha:*:*:*:*:*:* Versions 0.2.3.14 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.15:alpha:*:*:*:*:*:* Versions 0.2.3.15 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.16:alpha:*:*:*:*:*:* Versions 0.2.3.16 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.17:beta:*:*:*:*:*:* Versions 0.2.3.17 beta Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.18:rc:*:*:*:*:*:* Versions 0.2.3.18 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.19:rc:*:*:*:*:*:* Versions 0.2.3.19 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.20:rc:*:*:*:*:*:* Versions 0.2.3.20 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.21:rc:*:*:*:*:*:* Versions 0.2.3.21 rc Vulnerable ·torproject

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-4922
  2. 2026-10-03 Alias added: GHSA-h4mc-jpwx-rjgp

References

Advisory 3

Other 5

  • TI-2016-07433 Use after free in Mozilla Firefox KEVCVSS 3.1HIGH 7.5
  • TI-2023-09419 The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4… CVSS 3.1MEDIUM 6.5
  • TI-2018-00448 Use after free in Tor CVSS 3.0HIGH 7.5
  • TI-2026-54108 Race condition in torproject Tor CVSS 3.1CRITICAL 9.0
  • TI-2026-54112 Out-of-bounds write in torproject Tor CVSS 3.1CRITICAL 9.3
  • TI-2026-32508 Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell… CVSS 3.1CRITICAL 9.1
See all 47 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences