Known vulnerabilities in tor (Alpine package)
Vendor:
Alpine Linux Development Team
Software:
tor (Alpine package)
Software CPE:
cpe:2.3:o:alpine:tor_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website:
https://alpinelinux.org/
Total vulnerabilities:
7
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
0.2.3.25-r0
0.2.4.22-r0
0.2.5.10-r0
0.2.6.7-r1
0.2.7.6-r0
0.3.0.8-r1
0.3.0.8-r0
0.3.0.6-r0
0.3.5.8-r0
0.3.5.10-r0
0.4.0.5-r0
0.4.2.6-r0
0.4.2.7-r0
0.4.1.7-r0
0.4.1.9-r0
0.4.2.5-r0
0.3.3.12-r0
0.3.1.9-r0
0.3.1.10-r0
0.3.2.9-r0
0.3.2.10-r0
0.3.4.9-r1
0.3.4.11-r0
0.3.3.12-r1
0.3.3.6-r0
0.3.2.10-r1
0.3.4.11-r1
0.3.4.9-r0
0.3.4.8-r0
0.3.3.9-r0
0.3.3.7-r0
0.3.5.10-r1
0.4.1.9-r1
0.4.1.6-r1
0.4.1.6-r0
0.4.1.5-r0
0.4.3.5-r0
0.4.2.5-r1
0.4.3.6-r0
0.4.4.5-r0
0.2.7.6-r1
0.2.7.6-r2
0.2.8.11-r0
0.2.8.12-r0
0.2.8.9-r0
0.2.8.7-r2
0.2.8.7-r1
0.2.8.7-r0
0.2.7.6-r5
0.2.7.6-r4
0.2.7.6-r3
0.2.9.10-r1
0.2.9.10-r0
0.2.9.9-r0
0.2.8.12-r1
0.3.1.10-r1
0.3.1.8-r1
0.3.1.8-r0
0.3.1.7-r0
0.3.0.10-r0
0.3.0.9-r0
0.3.5.12-r0
0.4.3.7-r0
0.4.4.6-r0
0.4.4.6-r2
0.4.4.7-r1
0.4.4.6-r1
0.4.4.7-r0
0.3.5.13-r0
0.4.3.8-r0
0.3.5.14-r0
0.4.4.8-r0
0.4.5.6-r0
0.4.5.7-r0
0.4.2.7-r1
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU26506 - Missing release of memory after effective lifetime CVE-2020-10593 |
CWE-401 | Medium | 0.3.5.10-r0, 0.4.1.9-r0 | 01.04.2020 |
SB2020040131 SB2020040132 SB2020040133 and 3 more |
||
| #VU26505 - Resource exhaustion CVE-2020-10592 |
CWE-400 | Medium | 0.3.5.10-r0, 0.4.1.9-r0 | 01.04.2020 |
SB2020040131 SB2020040132 SB2020040133 and 4 more |
||
| #VU31154 - Out-of-bounds read CVE-2019-8955 |
CWE-125 | Medium | 0.3.3.12-r0 | 22.02.2019 |
SB2019022217 SB2019040231 SB2019040232 and 5 more |
||
| #VU12293 - NULL Pointer Dereference CVE-2018-0490 |
CWE-476 | Low | 0.3.1.10-r0 | 30.04.2018 |
SB2018043003 SB2018030402 SB2018030818 |
||
| #VU31346 - Use After Free CVE-2018-0491 |
CWE-416 | Medium | 0.3.2.10-r0 | 05.03.2018 |
SB2018030514 SB2018030403 SB2018030818 |
||
| #VU8851 - Exposure of sensitive information to an unauthorized actor CVE-2017-0380 |
CWE-200 | Low | 0.3.0.8-r1 | 09.10.2017 |
SB2017101708 SB2017100703 SB2017101068 and 7 more |
||
| #VU31418 - Reachable Assertion CVE-2017-0376 |
CWE-617 | Medium | 0.3.0.8-r0 | 09.06.2017 |
SB2017060910 SB2017061218 SB20170613104 and 3 more |