CVE-2009-2426 - CVE House
Back to Database
Status published Medium CVE-2009-2426

The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35...

Vulnerability Description

The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-2426

Credits & Attribution

No credits recorded in the NVD database.

References

More from tor

View All →
CVE-2012-3519
routerlist.c in Tor before 0.2.2.38 uses a different amount of...
Medium 5
CVE-2012-3518
The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does...
Medium 5
CVE-2012-3517
Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow...
Medium 5
CVE-2011-4897
Tor before 0.2.2.25-alpha, when configured as a relay without the...
Medium 4.3
CVE-2011-4896
Tor before 0.2.2.24-alpha continues to use a reachable bridge that...
Medium 4.3

Affected Vendor

Affected Software

tor
Vulnerable Versions:
0.1.0.1, 0.1.0.2, 0.1.0.3, 0.1.0.4, 0.1.0.5, 0.1.0.6, 0.1.0.7, 0.1.0.8, 0.1.0.9, 0.1.0.10, 0.1.0.11, 0.1.0.12, 0.1.0.13, 0.1.0.14, 0.1.0.15, 0.1.0.16, 0.1.0.17, 0.1.0.18, 0.1.0.19, 0.1.1, 0.1.1.1, 0.1.1.1_alpha, 0.1.1.2, 0.1.1.2_alpha, 0.1.1.3, 0.1.1.3_alpha, 0.1.1.4, 0.1.1.4_alpha, 0.1.1.5, 0.1.1.5_alpha, 0.1.1.6, 0.1.1.6_alpha, 0.1.1.7, 0.1.1.7_alpha, 0.1.1.8, 0.1.1.8_alpha, 0.1.1.9, 0.1.1.9_alpha, 0.1.1.10, 0.1.1.10_alpha, 0.1.1.11, 0.1.1.12, 0.1.1.13, 0.1.1.14, 0.1.1.15, 0.1.1.16, 0.1.1.17, 0.1.1.18, 0.1.1.19, 0.1.1.20, 0.1.1.21, 0.1.1.22, 0.1.1.23, 0.1.1.25, 0.1.1.26, 0.1.2.1_alpha-cvs, 0.1.2.2, 0.1.2.3, 0.1.2.4, 0.1.2.5, 0.1.2.6, 0.1.2.7, 0.2.0.1, 0.2.0.2, 0.2.0.3, 0.2.0.4, 0.2.0.5, 0.2.0.6, 0.2.0.7, 0.2.0.8, 0.2.0.9, 0.2.0.10, 0.2.0.11, 0.2.0.12, 0.2.0.13, 0.2.0.14, 0.2.0.15, 0.2.0.16, 0.2.0.17, 0.2.0.18, 0.2.0.19, 0.2.0.20, 0.2.0.21, 0.2.0.22, 0.2.0.23, 0.2.0.24, 0.2.0.25, 0.2.0.26, 0.2.0.27, 0.2.0.28, 0.2.0.29, 0.2.0.31, 0.2.0.33, 0.2.0.34

Timeline

Official Publish: July 10th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.