Vulnerabilities > Torproject > TOR > 0.2.9.15

DATE CVE VULNERABILITY TITLE RISK
2017-11-04 CVE-2017-16541 Information Exposure vulnerability in multiple products
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil.
4.3
2017-06-09 CVE-2017-0376 Reachable Assertion vulnerability in multiple products
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the connection_edge_process_relay_cell function via a BEGIN_DIR cell on a rendezvous circuit.
network
low complexity
torproject debian CWE-617
5.0
2017-06-09 CVE-2017-0375 Reachable Assertion vulnerability in Torproject TOR
The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the relay_send_end_cell_from_edge_ function via a malformed BEGIN cell.
network
low complexity
torproject CWE-617
5.0