Read the docs
TI-2014-04188 Aliases CVE-2014-5117GHSA-v73p-8445-35p5

Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound…

Priority LOW 30Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAY_EARLY cells as a means of communicating information about hidden service names.

Why it matters now

EPSS 0.02104 81st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 124

CPEVersionsRoleVendor
cpe:2.3:a:torproject:tor:*:alpha:*:*:*:*:*:*up to 0.2.4.22Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:*:*:*:*:*:*:*0.0.2Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre13:*:*:*:*:*:*0.0.2 pre13Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre14:*:*:*:*:*:*0.0.2 pre14Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre15:*:*:*:*:*:*0.0.2 pre15Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre16:*:*:*:*:*:*0.0.2 pre16Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre17:*:*:*:*:*:*0.0.2 pre17Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre18:*:*:*:*:*:*0.0.2 pre18Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre19:*:*:*:*:*:*0.0.2 pre19Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre20:*:*:*:*:*:*0.0.2 pre20Vulnerabletorproject
  • cpe:2.3:a:torproject:tor:*:alpha:*:*:*:*:*:* Versions up to 0.2.4.22 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:*:*:*:*:*:*:* Versions 0.0.2 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre13:*:*:*:*:*:* Versions 0.0.2 pre13 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre14:*:*:*:*:*:* Versions 0.0.2 pre14 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre15:*:*:*:*:*:* Versions 0.0.2 pre15 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre16:*:*:*:*:*:* Versions 0.0.2 pre16 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre17:*:*:*:*:*:* Versions 0.0.2 pre17 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre18:*:*:*:*:*:* Versions 0.0.2 pre18 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre19:*:*:*:*:*:* Versions 0.0.2 pre19 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre20:*:*:*:*:*:* Versions 0.0.2 pre20 Vulnerable ·torproject
Show 114 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:torproject:tor:0.0.2:pre21:*:*:*:*:*:*0.0.2 pre21Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre22:*:*:*:*:*:*0.0.2 pre22Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre23:*:*:*:*:*:*0.0.2 pre23Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre24:*:*:*:*:*:*0.0.2 pre24Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre25:*:*:*:*:*:*0.0.2 pre25Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre26:*:*:*:*:*:*0.0.2 pre26Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.2:pre27:*:*:*:*:*:*0.0.2 pre27Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.3:*:*:*:*:*:*:*0.0.3Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.4:*:*:*:*:*:*:*0.0.4Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.5:*:*:*:*:*:*:*0.0.5Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.6:*:*:*:*:*:*:*0.0.6Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.6.1:*:*:*:*:*:*:*0.0.6.1Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.6.2:*:*:*:*:*:*:*0.0.6.2Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.7:*:*:*:*:*:*:*0.0.7Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.7.1:*:*:*:*:*:*:*0.0.7.1Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.7.2:*:*:*:*:*:*:*0.0.7.2Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.7.3:*:*:*:*:*:*:*0.0.7.3Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.8.1:*:*:*:*:*:*:*0.0.8.1Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.1:*:*:*:*:*:*:*0.0.9.1Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.2:*:*:*:*:*:*:*0.0.9.2Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.3:*:*:*:*:*:*:*0.0.9.3Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.4:*:*:*:*:*:*:*0.0.9.4Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.5:*:*:*:*:*:*:*0.0.9.5Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.6:*:*:*:*:*:*:*0.0.9.6Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.7:*:*:*:*:*:*:*0.0.9.7Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.8:*:*:*:*:*:*:*0.0.9.8Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.9:*:*:*:*:*:*:*0.0.9.9Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.0.9.10:*:*:*:*:*:*:*0.0.9.10Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.10:*:*:*:*:*:*:*0.1.0.10Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.11:*:*:*:*:*:*:*0.1.0.11Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.12:*:*:*:*:*:*:*0.1.0.12Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.13:*:*:*:*:*:*:*0.1.0.13Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.14:*:*:*:*:*:*:*0.1.0.14Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.15:*:*:*:*:*:*:*0.1.0.15Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.16:*:*:*:*:*:*:*0.1.0.16Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.0.17:*:*:*:*:*:*:*0.1.0.17Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.20:*:*:*:*:*:*:*0.1.1.20Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.21:*:*:*:*:*:*:*0.1.1.21Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.22:*:*:*:*:*:*:*0.1.1.22Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.23:*:*:*:*:*:*:*0.1.1.23Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.24:*:*:*:*:*:*:*0.1.1.24Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.25:*:*:*:*:*:*:*0.1.1.25Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.1.26:*:*:*:*:*:*:*0.1.1.26Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.13:*:*:*:*:*:*:*0.1.2.13Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.14:*:*:*:*:*:*:*0.1.2.14Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.15:*:*:*:*:*:*:*0.1.2.15Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.16:*:*:*:*:*:*:*0.1.2.16Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.17:*:*:*:*:*:*:*0.1.2.17Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.18:*:*:*:*:*:*:*0.1.2.18Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.1.2.19:*:*:*:*:*:*:*0.1.2.19Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.30:*:*:*:*:*:*:*0.2.0.30Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.31:*:*:*:*:*:*:*0.2.0.31Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.32:*:*:*:*:*:*:*0.2.0.32Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.33:*:*:*:*:*:*:*0.2.0.33Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.34:*:*:*:*:*:*:*0.2.0.34Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.0.35:*:*:*:*:*:*:*0.2.0.35Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.18:*:*:*:*:*:*:*0.2.2.18Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.19:*:*:*:*:*:*:*0.2.2.19Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.20:*:*:*:*:*:*:*0.2.2.20Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.21:*:*:*:*:*:*:*0.2.2.21Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.22:*:*:*:*:*:*:*0.2.2.22Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.23:*:*:*:*:*:*:*0.2.2.23Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.24:*:*:*:*:*:*:*0.2.2.24Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.25:*:*:*:*:*:*:*0.2.2.25Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.26:*:*:*:*:*:*:*0.2.2.26Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.27:*:*:*:*:*:*:*0.2.2.27Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.28:*:*:*:*:*:*:*0.2.2.28Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.29:*:*:*:*:*:*:*0.2.2.29Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.30:*:*:*:*:*:*:*0.2.2.30Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.31:*:*:*:*:*:*:*0.2.2.31Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.32:*:*:*:*:*:*:*0.2.2.32Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.33:*:*:*:*:*:*:*0.2.2.33Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.34:*:*:*:*:*:*:*0.2.2.34Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.35:*:*:*:*:*:*:*0.2.2.35Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.36:*:*:*:*:*:*:*0.2.2.36Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.37:*:*:*:*:*:*:*0.2.2.37Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.2.38:*:*:*:*:*:*:*0.2.2.38Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3:*:*:*:*:*:*:*0.2.3Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.13:alpha:*:*:*:*:*:*0.2.3.13 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.14:alpha:*:*:*:*:*:*0.2.3.14 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.15:alpha:*:*:*:*:*:*0.2.3.15 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.16:alpha:*:*:*:*:*:*0.2.3.16 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.17:beta:*:*:*:*:*:*0.2.3.17 betaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.18:rc:*:*:*:*:*:*0.2.3.18 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.19:rc:*:*:*:*:*:*0.2.3.19 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.20:rc:*:*:*:*:*:*0.2.3.20 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.21:rc:*:*:*:*:*:*0.2.3.21 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.22:rc:*:*:*:*:*:*0.2.3.22 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.23:rc:*:*:*:*:*:*0.2.3.23 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.3.24:rc:*:*:*:*:*:*0.2.3.24 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.1:alpha:*:*:*:*:*:*0.2.4.1 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.2:alpha:*:*:*:*:*:*0.2.4.2 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.3:alpha:*:*:*:*:*:*0.2.4.3 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.4:alpha:*:*:*:*:*:*0.2.4.4 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.5:alpha:*:*:*:*:*:*0.2.4.5 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.6:alpha:*:*:*:*:*:*0.2.4.6 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.7:alpha:*:*:*:*:*:*0.2.4.7 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.8:alpha:*:*:*:*:*:*0.2.4.8 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.9:alpha:*:*:*:*:*:*0.2.4.9 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.10:alpha:*:*:*:*:*:*0.2.4.10 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.11:alpha:*:*:*:*:*:*0.2.4.11 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.12:alpha:*:*:*:*:*:*0.2.4.12 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.13:alpha:*:*:*:*:*:*0.2.4.13 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.14:alpha:*:*:*:*:*:*0.2.4.14 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.15:rc:*:*:*:*:*:*0.2.4.15 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.16:rc:*:*:*:*:*:*0.2.4.16 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.17:rc:*:*:*:*:*:*0.2.4.17 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.18:rc:*:*:*:*:*:*0.2.4.18 rcVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.19:*:*:*:*:*:*:*0.2.4.19Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.4.20:*:*:*:*:*:*:*0.2.4.20Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.5.2:alpha:*:*:*:*:*:*0.2.5.2 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.5.3:alpha:*:*:*:*:*:*0.2.5.3 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.5.4:alpha:*:*:*:*:*:*0.2.5.4 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.2.5.5:alpha:*:*:*:*:*:*0.2.5.5 alphaVulnerabletorproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre21:*:*:*:*:*:* Versions 0.0.2 pre21 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre22:*:*:*:*:*:* Versions 0.0.2 pre22 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre23:*:*:*:*:*:* Versions 0.0.2 pre23 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre24:*:*:*:*:*:* Versions 0.0.2 pre24 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre25:*:*:*:*:*:* Versions 0.0.2 pre25 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre26:*:*:*:*:*:* Versions 0.0.2 pre26 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.2:pre27:*:*:*:*:*:* Versions 0.0.2 pre27 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.3:*:*:*:*:*:*:* Versions 0.0.3 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.4:*:*:*:*:*:*:* Versions 0.0.4 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.5:*:*:*:*:*:*:* Versions 0.0.5 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.6:*:*:*:*:*:*:* Versions 0.0.6 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.6.1:*:*:*:*:*:*:* Versions 0.0.6.1 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.6.2:*:*:*:*:*:*:* Versions 0.0.6.2 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.7:*:*:*:*:*:*:* Versions 0.0.7 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.7.1:*:*:*:*:*:*:* Versions 0.0.7.1 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.7.2:*:*:*:*:*:*:* Versions 0.0.7.2 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.7.3:*:*:*:*:*:*:* Versions 0.0.7.3 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.8.1:*:*:*:*:*:*:* Versions 0.0.8.1 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.1:*:*:*:*:*:*:* Versions 0.0.9.1 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.2:*:*:*:*:*:*:* Versions 0.0.9.2 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.3:*:*:*:*:*:*:* Versions 0.0.9.3 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.4:*:*:*:*:*:*:* Versions 0.0.9.4 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.5:*:*:*:*:*:*:* Versions 0.0.9.5 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.6:*:*:*:*:*:*:* Versions 0.0.9.6 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.7:*:*:*:*:*:*:* Versions 0.0.9.7 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.8:*:*:*:*:*:*:* Versions 0.0.9.8 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.9:*:*:*:*:*:*:* Versions 0.0.9.9 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.0.9.10:*:*:*:*:*:*:* Versions 0.0.9.10 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.10:*:*:*:*:*:*:* Versions 0.1.0.10 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.11:*:*:*:*:*:*:* Versions 0.1.0.11 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.12:*:*:*:*:*:*:* Versions 0.1.0.12 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.13:*:*:*:*:*:*:* Versions 0.1.0.13 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.14:*:*:*:*:*:*:* Versions 0.1.0.14 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.15:*:*:*:*:*:*:* Versions 0.1.0.15 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.16:*:*:*:*:*:*:* Versions 0.1.0.16 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.0.17:*:*:*:*:*:*:* Versions 0.1.0.17 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.20:*:*:*:*:*:*:* Versions 0.1.1.20 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.21:*:*:*:*:*:*:* Versions 0.1.1.21 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.22:*:*:*:*:*:*:* Versions 0.1.1.22 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.23:*:*:*:*:*:*:* Versions 0.1.1.23 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.24:*:*:*:*:*:*:* Versions 0.1.1.24 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.25:*:*:*:*:*:*:* Versions 0.1.1.25 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.1.26:*:*:*:*:*:*:* Versions 0.1.1.26 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.13:*:*:*:*:*:*:* Versions 0.1.2.13 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.14:*:*:*:*:*:*:* Versions 0.1.2.14 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.15:*:*:*:*:*:*:* Versions 0.1.2.15 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.16:*:*:*:*:*:*:* Versions 0.1.2.16 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.17:*:*:*:*:*:*:* Versions 0.1.2.17 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.18:*:*:*:*:*:*:* Versions 0.1.2.18 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.1.2.19:*:*:*:*:*:*:* Versions 0.1.2.19 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.30:*:*:*:*:*:*:* Versions 0.2.0.30 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.31:*:*:*:*:*:*:* Versions 0.2.0.31 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.32:*:*:*:*:*:*:* Versions 0.2.0.32 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.33:*:*:*:*:*:*:* Versions 0.2.0.33 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.34:*:*:*:*:*:*:* Versions 0.2.0.34 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.0.35:*:*:*:*:*:*:* Versions 0.2.0.35 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.18:*:*:*:*:*:*:* Versions 0.2.2.18 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.19:*:*:*:*:*:*:* Versions 0.2.2.19 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.20:*:*:*:*:*:*:* Versions 0.2.2.20 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.21:*:*:*:*:*:*:* Versions 0.2.2.21 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.22:*:*:*:*:*:*:* Versions 0.2.2.22 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.23:*:*:*:*:*:*:* Versions 0.2.2.23 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.24:*:*:*:*:*:*:* Versions 0.2.2.24 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.25:*:*:*:*:*:*:* Versions 0.2.2.25 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.26:*:*:*:*:*:*:* Versions 0.2.2.26 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.27:*:*:*:*:*:*:* Versions 0.2.2.27 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.28:*:*:*:*:*:*:* Versions 0.2.2.28 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.29:*:*:*:*:*:*:* Versions 0.2.2.29 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.30:*:*:*:*:*:*:* Versions 0.2.2.30 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.31:*:*:*:*:*:*:* Versions 0.2.2.31 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.32:*:*:*:*:*:*:* Versions 0.2.2.32 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.33:*:*:*:*:*:*:* Versions 0.2.2.33 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.34:*:*:*:*:*:*:* Versions 0.2.2.34 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.35:*:*:*:*:*:*:* Versions 0.2.2.35 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.36:*:*:*:*:*:*:* Versions 0.2.2.36 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.37:*:*:*:*:*:*:* Versions 0.2.2.37 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.2.38:*:*:*:*:*:*:* Versions 0.2.2.38 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3:*:*:*:*:*:*:* Versions 0.2.3 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.13:alpha:*:*:*:*:*:* Versions 0.2.3.13 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.14:alpha:*:*:*:*:*:* Versions 0.2.3.14 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.15:alpha:*:*:*:*:*:* Versions 0.2.3.15 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.16:alpha:*:*:*:*:*:* Versions 0.2.3.16 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.17:beta:*:*:*:*:*:* Versions 0.2.3.17 beta Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.18:rc:*:*:*:*:*:* Versions 0.2.3.18 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.19:rc:*:*:*:*:*:* Versions 0.2.3.19 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.20:rc:*:*:*:*:*:* Versions 0.2.3.20 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.21:rc:*:*:*:*:*:* Versions 0.2.3.21 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.22:rc:*:*:*:*:*:* Versions 0.2.3.22 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.23:rc:*:*:*:*:*:* Versions 0.2.3.23 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.3.24:rc:*:*:*:*:*:* Versions 0.2.3.24 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.1:alpha:*:*:*:*:*:* Versions 0.2.4.1 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.2:alpha:*:*:*:*:*:* Versions 0.2.4.2 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.3:alpha:*:*:*:*:*:* Versions 0.2.4.3 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.4:alpha:*:*:*:*:*:* Versions 0.2.4.4 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.5:alpha:*:*:*:*:*:* Versions 0.2.4.5 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.6:alpha:*:*:*:*:*:* Versions 0.2.4.6 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.7:alpha:*:*:*:*:*:* Versions 0.2.4.7 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.8:alpha:*:*:*:*:*:* Versions 0.2.4.8 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.9:alpha:*:*:*:*:*:* Versions 0.2.4.9 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.10:alpha:*:*:*:*:*:* Versions 0.2.4.10 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.11:alpha:*:*:*:*:*:* Versions 0.2.4.11 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.12:alpha:*:*:*:*:*:* Versions 0.2.4.12 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.13:alpha:*:*:*:*:*:* Versions 0.2.4.13 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.14:alpha:*:*:*:*:*:* Versions 0.2.4.14 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.15:rc:*:*:*:*:*:* Versions 0.2.4.15 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.16:rc:*:*:*:*:*:* Versions 0.2.4.16 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.17:rc:*:*:*:*:*:* Versions 0.2.4.17 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.18:rc:*:*:*:*:*:* Versions 0.2.4.18 rc Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.19:*:*:*:*:*:*:* Versions 0.2.4.19 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.4.20:*:*:*:*:*:*:* Versions 0.2.4.20 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.5.2:alpha:*:*:*:*:*:* Versions 0.2.5.2 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.5.3:alpha:*:*:*:*:*:* Versions 0.2.5.3 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.5.4:alpha:*:*:*:*:*:* Versions 0.2.5.4 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.2.5.5:alpha:*:*:*:*:*:* Versions 0.2.5.5 alpha Vulnerable ·torproject

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-5117
  2. 2026-10-03 Alias added: GHSA-v73p-8445-35p5

References

Advisory 1

Other 4

  • TI-2016-07433 Use after free in Mozilla Firefox KEVCVSS 3.1HIGH 7.5
  • TI-2023-09419 The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4… CVSS 3.1MEDIUM 6.5
  • TI-2018-00448 Use after free in Tor CVSS 3.0HIGH 7.5
  • TI-2026-54108 Race condition in torproject Tor CVSS 3.1CRITICAL 9.0
  • TI-2026-54112 Out-of-bounds write in torproject Tor CVSS 3.1CRITICAL 9.3
  • TI-2026-32508 Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell… CVSS 3.1CRITICAL 9.1
See all 47 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences