CVE-2008-5398

Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination hostname of a refused stream.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
tortor
𝑥
≤ 0.1.2.31
tortor
0.0.2
tortor
0.0.2_pre13:_pre13
tortor
0.0.2_pre14:_pre14
tortor
0.0.2_pre15:_pre15
tortor
0.0.2_pre16:_pre16
tortor
0.0.2_pre17:_pre17
tortor
0.0.2_pre18:_pre18
tortor
0.0.2_pre19:_pre19
tortor
0.0.2_pre20:_pre20
tortor
0.0.2_pre21:_pre21
tortor
0.0.2_pre22:_pre22
tortor
0.0.2_pre23:_pre23
tortor
0.0.2_pre24:_pre24
tortor
0.0.2_pre25:_pre25
tortor
0.0.2_pre26:_pre26
tortor
0.0.2_pre27:_pre27
tortor
0.0.3
tortor
0.0.4
tortor
0.0.5
tortor
0.0.6
tortor
0.0.6.1
tortor
0.0.6.2
tortor
0.0.7
tortor
0.0.7.1
tortor
0.0.7.2
tortor
0.0.7.3
tortor
0.0.8
tortor
0.0.8.1
tortor
0.0.9
tortor
0.0.9.1
tortor
0.0.9.2
tortor
0.0.9.3
tortor
0.0.9.4
tortor
0.0.9.5
tortor
0.0.9.6
tortor
0.0.9.7
tortor
0.0.9.8
tortor
0.0.9.9
tortor
0.0.9.10
tortor
0.1.0.1
tortor
0.1.0.2
tortor
0.1.0.3
tortor
0.1.0.4
tortor
0.1.0.5
tortor
0.1.0.6
tortor
0.1.0.7
tortor
0.1.0.8
tortor
0.1.0.9
tortor
0.1.0.10
tortor
0.1.0.11
tortor
0.1.0.12
tortor
0.1.0.13
tortor
0.1.0.14
tortor
0.1.0.15
tortor
0.1.0.16
tortor
0.1.0.17
tortor
0.1.0.18
tortor
0.1.0.19
tortor
0.1.1.1
tortor
0.1.1.1_alpha:_alpha
tortor
0.1.1.2
tortor
0.1.1.2_alpha:_alpha
tortor
0.1.1.3
tortor
0.1.1.3_alpha:_alpha
tortor
0.1.1.4
tortor
0.1.1.4_alpha:_alpha
tortor
0.1.1.5
tortor
0.1.1.5_alpha:_alpha
tortor
0.1.1.6
tortor
0.1.1.6_alpha:_alpha
tortor
0.1.1.7
tortor
0.1.1.7_alpha:_alpha
tortor
0.1.1.8
tortor
0.1.1.8_alpha:_alpha
tortor
0.1.1.9
tortor
0.1.1.9_alpha:_alpha
tortor
0.1.1.10
tortor
0.1.1.10_alpha:_alpha
tortor
0.1.1.11
tortor
0.1.1.12
tortor
0.1.1.13
tortor
0.1.1.14
tortor
0.1.1.15
tortor
0.1.1.16
tortor
0.1.1.17
tortor
0.1.1.18
tortor
0.1.1.19
tortor
0.1.1.20
tortor
0.1.1.21
tortor
0.1.1.22
tortor
0.1.1.23
tortor
0.1.1.26
tortor
0.1.2.1_alpha-cvs:_alpha
tortor
0.1.2.14
tortor
0.1.2.15
tortor
0.1.2.17
tortor
0.1.2.18
tortor
0.1.2.19
tortor
0.1.2.30
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tor
bullseye (security)
0.4.5.16-1
fixed
bullseye
0.4.5.16-1
fixed
bookworm
0.4.7.16-1
fixed
bookworm (security)
0.4.7.16-1
fixed
sid
0.4.8.13-2
fixed
trixie
0.4.8.13-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tor
oneiric
not-affected
natty
not-affected
maverick
dne
lucid
dne
karmic
dne
jaunty
dne
intrepid
ignored
hardy
ignored
gutsy
ignored
dapper
ignored
Common Weakness Enumeration