CVE-2009-0939

Publication date 18 March 2009

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact and attack vectors related to "Spec conformance," as demonstrated using 192.168.0.

Status

Package Ubuntu Release Status
tor 9.10 karmic Not in release
9.04 jaunty Not in release
8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
7.10 gutsy Ignored end of life, was needs-triage
6.06 LTS dapper Ignored end of life