CVE-2011-2769
N/A
Published: December 23, 2011 at 02:00 AM UTC
Updated: June 16, 2026 at 11:31 PM UTC
1 product affected across 1 vendorTor
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1%
Description
Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 0.2.2.330.0.20.0.30.0.40.0.50.0.60.0.6.10.0.6.20.0.70.0.7.10.0.7.20.0.7.30.0.80.0.8.10.0.90.0.9.10.0.9.100.0.9.20.0.9.30.0.9.40.0.9.50.0.9.60.0.9.70.0.9.80.0.9.90.1.0.10.1.0.100.1.0.110.1.0.120.1.0.130.1.0.140.1.0.150.1.0.160.1.0.170.1.0.180.1.0.190.1.0.20.1.0.30.1.0.40.1.0.50.1.0.60.1.0.70.1.0.80.1.0.90.1.10.1.1.10.1.1.1 alpha0.1.1.100.1.1.10 alpha0.1.1.110.1.1.120.1.1.130.1.1.140.1.1.150.1.1.160.1.1.170.1.1.180.1.1.190.1.1.20.1.1.2 alpha0.1.1.200.1.1.210.1.1.220.1.1.230.1.1.250.1.1.260.1.1.30.1.1.3 alpha0.1.1.40.1.1.4 alpha0.1.1.50.1.1.5 alpha0.1.1.60.1.1.6 alpha0.1.1.70.1.1.7 alpha0.1.1.80.1.1.8 alpha0.1.1.90.1.1.9 alpha0.1.2.1 alpha0.1.2.1 alpha-cvs0.1.2.100.1.2.110.1.2.120.1.2.130.1.2.140.1.2.150.1.2.160.1.2.170.1.2.180.1.2.190.1.2.20.1.2.3 alpha0.1.2.300.1.2.310.1.2.40.1.2.50.1.2.5 alpha0.1.2.6 alpha0.1.2.7 alpha0.1.2.8 beta0.1.2.90.2.0.1 alpha0.2.0.10 alpha0.2.0.11 alpha0.2.0.12 alpha0.2.0.13 alpha0.2.0.14 alpha0.2.0.15 alpha0.2.0.16 alpha0.2.0.17 alpha0.2.0.18 alpha0.2.0.19 alpha0.2.0.2 alpha0.2.0.20 alpha0.2.0.21 alpha0.2.0.22 alpha0.2.0.23 alpha0.2.0.24 alpha0.2.0.25 alpha0.2.0.26 alpha0.2.0.27 alpha0.2.0.28 alpha0.2.0.290.2.0.29 alpha0.2.0.3 alpha0.2.0.300.2.0.30 alpha0.2.0.310.2.0.31 alpha0.2.0.32 alpha0.2.0.330.2.0.34 alpha0.2.0.350.2.0.4 alpha0.2.0.5 alpha0.2.0.6 alpha0.2.0.7 alpha0.2.0.8 alpha0.2.0.9 alpha0.2.1.1 alpha0.2.1.1.1 alpha0.2.1.1.10 alpha0.2.1.1.11 alpha0.2.1.1.120.2.1.1.12 alpha0.2.1.1.130.2.1.1.140.2.1.1.150.2.1.1.160.2.1.1.170.2.1.1.180.2.1.1.190.2.1.1.2 alpha0.2.1.1.200.2.1.1.210.2.1.1.220.2.1.1.230.2.1.1.240.2.1.1.250.2.1.1.260.2.1.1.270.2.1.1.280.2.1.1.3 alpha0.2.1.1.4 alpha0.2.1.1.5 alpha0.2.1.1.6 alpha0.2.1.1.7 alpha0.2.1.1.8 alpha0.2.1.1.9 alpha0.2.1.10 alpha0.2.1.11 alpha0.2.1.120.2.1.12 alpha0.2.1.130.2.1.140.2.1.150.2.1.160.2.1.170.2.1.180.2.1.190.2.1.2 alpha0.2.1.200.2.1.210.2.1.220.2.1.230.2.1.240.2.1.250.2.1.260.2.1.270.2.1.280.2.1.290.2.1.3 alpha0.2.1.4 alpha0.2.1.5 alpha0.2.1.6 alpha0.2.1.7 alpha0.2.1.8 alpha0.2.1.9 alpha0.2.2.10.2.2.1 alpha0.2.2.10 alpha0.2.2.11 alpha0.2.2.12 alpha0.2.2.13 alpha0.2.2.14 alpha0.2.2.15 alpha0.2.2.16 alpha0.2.2.17 alpha0.2.2.18 alpha0.2.2.19 alpha0.2.2.20.2.2.2 alpha0.2.2.20 alpha0.2.2.290.2.2.29 beta0.2.2.30.2.2.3 alpha0.2.2.320.2.2.40.2.2.4 alpha0.2.2.50.2.2.5 alpha0.2.2.60.2.2.6 alpha0.2.2.7 alpha0.2.2.8 alpha0.2.2.9 alpha
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (2)
Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2011/dsa-2331x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
https://blog.torproject.org/blog/tor-02234-released-security-patchesQuick Info
StatusMODIFIED
CWE
CWE-200
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card