Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Tor ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.
Product
Tor ist eine Anwendung bzw. Netzwerk zur Anonymisierung der Verbindungsdaten.
Vulnerabilities 7
-
High 8.9
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-…
-
High 7.5
tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected s…
-
High 7.0
Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A …
-
Medium 6.5
tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of r…
-
Medium 5.9
Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg re…
-
Medium 5.3
Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-str…
-
Low 3.7
tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncat…
Revision history
-
#3
Neue Updates von openSUSE aufgenommen
-
#2
Neue Updates von openSUSE aufgenommen
-
#1
Initiale Fassung
References
-
Tor Changelog vom 2026-08-20
https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.9.11/ChangeLog
-
GitHub Security Advisory GHSA-J5C4-CWJR-6VV5 vom 2026-08-20
https://github.com/advisories/GHSA-J5C4-CWJR-6VV5
-
GitHub Security Advisory GHSA-9mf5-x83c-fg2x vom 2026-08-20
https://github.com/advisories/GHSA-9mf5-x83c-fg2x
-
GitHub Security Advisory GHSA-PQ38-GW56-4W65 vom 2026-08-20
https://github.com/advisories/GHSA-PQ38-GW56-4W65
-
GitHub Security Advisory GHSA-jm5p-g55h-rwhg vom 2026-08-20
https://github.com/advisories/GHSA-jm5p-g55h-rwhg
-
GitHub Security Advisory GHSA-5g6h-2vr8-m7f4 vom 2026-08-20
https://github.com/advisories/GHSA-5g6h-2vr8-m7f4
-
GitHub Security Advisory GHSA-r3c6-fj5w-6f75 vom 2026-08-20
https://github.com/advisories/GHSA-r3c6-fj5w-6f75
-
GitHub Security Advisory GHSA-36CC-RHPV-JRXC vom 2026-08-20
https://github.com/advisories/GHSA-36CC-RHPV-JRXC
-
openSUSE Security Update OPENSUSE-SU-2026:11590-1 vom 2026-08-27
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/J3OOWWFCIOAR7SCIVWYWCHHV6G2BGSPN/
-
openSUSE Security Update OPENSUSE-SU-2026:0306-1 vom 2026-08-30
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GVCF62CYPUCDNTBUMELUJUMYDOZQFO6D/