High
Security advisory
In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-8955
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 04:56 UTC · Revision 1
Source evidence
In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.
osv:CVE-2019-8955
Complete source record
{
"id": "17cbe1cac73a167822166abf9ca8da67d26668d7291e243d32922189a53593bf",
"url": "https://osv.dev/vulnerability/CVE-2019-8955",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-8955",
"summary": "In Tor before 0.3.3.12, 0.3.4.x before 0.3.4.11, 0.3.5.x before 0.3.5.8, and 0.4.x before 0.4.0.2-alpha, remote denial of service against Tor clients and relays can occur via memory exhaustion in the KIST cell scheduler.",
"evidence": "osv:CVE-2019-8955",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2019-8955",
"aliases": [
"CVE-2019-8955"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/torproject/tor",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "f3e21c27631ee40603c1cab01b8e6b495689b69c"
},
{
"introduced": "da95b91355248ad8f3a6aa6733cc6d24915f59ce"
},
{
"fixed": "4fd31340f3355342deebf49b586ae38bc2e9c8fe"
},
{
"introduced": "cfff582e4d68b4026d19c4cee4c2d893aaab116f"
},
{
"last_affected": "81f1b89efc94723f2c13b0b80d311364a2245d85"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.3.3.12"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.8"
},
{
"fixed": "0.3.4.11"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.0:alpha-dev:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.0-alpha\\-dev"
},
{
"last_affected": "0.3.4.0-alpha\\-dev"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.1:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.1-alpha"
},
{
"last_affected": "0.3.4.1-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.2:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.2-alpha"
},
{
"last_affected": "0.3.4.2-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.3:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.3-alpha"
},
{
"last_affected": "0.3.4.3-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.4:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.4-rc"
},
{
"last_affected": "0.3.4.4-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.5:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.5-rc"
},
{
"last_affected": "0.3.4.5-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.6:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.6-rc"
},
{
"last_affected": "0.3.4.6-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.7:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.7-rc"
},
{
"last_affected": "0.3.4.7-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.0:alpha-dev:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.0-alpha\\-dev"
},
{
"last_affected": "0.3.5.0-alpha\\-dev"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.1:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.1-alpha"
},
{
"last_affected": "0.3.5.1-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.2:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.2-alpha"
},
{
"last_affected": "0.3.5.2-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.3:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.3-alpha"
},
{
"last_affected": "0.3.5.3-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.4:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.4-alpha"
},
{
"last_affected": "0.3.5.4-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.5:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.5-alpha"
},
{
"last_affected": "0.3.5.5-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.6:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.6-rc"
},
{
"last_affected": "0.3.5.6-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.7"
},
{
"last_affected": "0.3.5.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.4.0.1:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.0.1-alpha"
},
{
"last_affected": "0.4.0.1-alpha"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"0.3.4.0-alpha\\-dev",
"0.3.4.1-alpha",
"0.3.4.2-alpha",
"0.3.4.3-alpha",
"0.3.4.4-rc",
"0.3.4.5-rc",
"0.3.4.6-rc",
"0.3.4.7-rc",
"0.3.5.0-alpha\\-dev",
"0.3.5.1-alpha",
"0.3.5.2-alpha",
"0.3.5.3-alpha",
"0.3.5.4-alpha",
"0.3.5.5-alpha",
"0.3.5.6-rc",
"0.3.5.7",
"0.4.0.1-alpha",
"tor-0.4.0.1-alpha",
"tor-0.3.3.11",
"tor-0.3.4.10",
"tor-0.3.4.9",
"tor-0.3.5.3-alpha",
"tor-0.3.5.2-alpha",
"tor-0.3.5.1-alpha",
"tor-0.3.3.10",
"tor-0.3.4.8",
"tor-0.3.3.9",
"tor-0.3.3.8",
"tor-0.3.5.0-alpha-dev",
"tor-0.3.3.7",
"tor-0.3.4.2-alpha",
"tor-0.3.3.6",
"tor-0.3.4.1-alpha",
"tor-0.3.3.5-rc",
"tor-0.3.3.4-alpha",
"tor-0.3.3.3-alpha",
"tor-0.3.4.0-alpha-dev",
"tor-0.3.3.2-alpha",
"tor-0.3.3.1-alpha",
"tor-0.3.3.0-alpha-dev",
"tor-0.3.2.2-alpha",
"tor-0.3.2.1-alpha",
"tor-0.3.1.3-alpha",
"tor-0.3.1.2-alpha",
"tor-0.3.1.1-alpha",
"tor-0.3.0.3-alpha",
"tor-0.3.0.2-alpha",
"tor-0.3.0.1-alpha",
"tor-0.2.9.4-alpha",
"tor-0.2.9.3-alpha",
"tor-0.2.9.2-alpha",
"tor-0.2.9.1-alpha",
"tor-0.2.9.0-root",
"tor-0.2.8.2-alpha",
"tor-0.2.8.1-alpha",
"tor-0.2.7.3-rc",
"tor-0.2.7.2-alpha",
"tor-0.2.7.1-alpha",
"tor-0.2.7.0-root",
"tor-0.2.6.3-alpha",
"tor-0.2.6.2-alpha",
"tor-0.2.6.1-alpha",
"tor-0.2.5.5-alpha",
"tor-0.2.5.4-alpha",
"tor-0.2.5.3-alpha",
"tor-0.2.5.2-alpha",
"tor-0.2.5.1-alpha",
"tor-0.2.4.10-alpha",
"tor-0.2.4.9-alpha",
"tor-0.2.4.8-alpha",
"tor-0.2.4.7-alpha",
"tor-0.2.4.6-alpha",
"tor-0.2.4.5-alpha",
"tor-0.2.4.4-alpha",
"tor-0.2.4.3-alpha",
"tor-0.2.4.2-alpha",
"tor-0.2.4.1-alpha",
"tor-0.2.3.17-beta",
"tor-0.2.3.16-alpha",
"tor-0.2.3.15-alpha",
"tor-0.2.3.14-alpha",
"tor-0.2.3.13-alpha",
"tor-0.2.3.12-alpha",
"tor-0.2.3.11-alpha",
"tor-0.2.3.10-alpha",
"tor-0.2.3.9-alpha",
"tor-0.2.3.8-alpha",
"tor-0.2.3.7-alpha",
"tor-0.2.3.6-alpha",
"tor-0.2.3.5-alpha",
"tor-0.2.3.4-alpha",
"tor-0.2.3.3-alpha",
"tor-0.2.3.2-alpha",
"tor-0.2.3.1-alpha",
"tor-0.2.2.16-alpha",
"tor-0.2.2.15-alpha",
"tor-0.2.2.14-alpha",
"tor-0.2.2.13-alpha",
"tor-0.2.2.12-alpha",
"tor-0.2.2.11-alpha",
"tor-0.2.2.10-alpha",
"tor-0.2.2.9-alpha",
"tor-0.2.2.8-alpha",
"tor-0.2.2.7-alpha",
"tor-0.2.2.6-alpha",
"tor-0.2.2.5-alpha",
"tor-0.2.2.4-alpha",
"tor-0.2.2.3-alpha",
"tor-0.2.2.2-alpha",
"tor-0.2.2.1-alpha",
"tor-0.2.1.14-rc",
"tor-0.2.1.13-alpha",
"tor-0.2.1.11-alpha",
"tor-0.2.1.10-alpha",
"tor-0.2.1.9-alpha",
"tor-0.2.1.8-alpha",
"tor-0.2.1.7-alpha",
"tor-0.2.1.6-alpha",
"tor-0.2.1.5-alpha",
"tor-0.2.1.4-alpha",
"tor-0.2.1.3-alpha",
"tor-0.2.1.2-alpha",
"tor-0.2.1.1-alpha",
"tor-0.2.0.20-rc",
"tor-0.2.0.19-alpha",
"tor-0.2.0.18-alpha",
"tor-0.2.0.17-alpha",
"tor-0.2.0.16-alpha",
"tor-0.2.0.15-alpha",
"tor-0.2.0.14-alpha",
"tor-0.2.0.13-alpha",
"tor-0.2.0.12-alpha",
"tor-0.2.0.11-alpha",
"tor-0.2.0.10-alpha",
"tor-0.2.0.9-alpha",
"tor-0.2.0.8-alpha",
"tor-0.2.0.7-alpha",
"tor-0.2.0.6-alpha",
"tor-0.2.0.5-alpha",
"tor-0.2.0.4-alpha@11197",
"tor-0.2.0.3-alpha",
"tor-0.2.0.2-alpha",
"tor-0.2.0.1-alpha",
"tor-0.1.2.9-rc",
"tor-0.1.2.8-beta",
"tor-0.1.2.7-alpha",
"tor-0.1.2.6-alpha",
"tor-0.1.2.5-alpha",
"tor-0.1.2.4-alpha",
"tor-0.1.2.3-alpha",
"tor-0.1.2.2-alpha",
"tor-0.1.2.1-alpha",
"tor-0.1.1.18-rc",
"tor-0.1.1.22",
"tor-0.1.1.21",
"tor-0.1.1.20",
"tor-0.1.1.19-rc",
"debian-version-0.1.1.18-rc-1",
"debian-version-0.1.1.22-1",
"debian-version-0.1.1.21-1",
"debian-version-0.1.1.20-1",
"debian-version-0.1.1.19-rc-1",
"debian-version-0.1.1.17-rc-1",
"tor-0.1.1.17-rc",
"debian-version-0.1.1.16-rc-1",
"tor-0.1.1.16-rc",
"tor-0.1.1.15-rc",
"debian-version-0.1.1.15-rc-1",
"debian-version-0.1.1.14-alpha-1",
"tor-0.1.1.14-alpha",
"debian-version-0.1.1.13-alpha-1",
"tor-0.1.1.13-alpha",
"debian-version-0.1.1.12-alpha-1",
"tor-0.1.1.12-alpha",
"debian-version-0.1.1.11-alpha-1",
"tor-0.1.1.11-alpha",
"debian-version-0.1.1.10-alpha-1",
"tor-0.1.1.10-alpha",
"debian-version-0.1.1.9-alpha-1",
"tor-0.1.1.9-alpha",
"debian-version-0.1.1.8-alpha-1",
"tor-0.1.1.8-alpha",
"debian-version-0.1.1.7-alpha-1",
"tor-0.1.1.7-alpha",
"debian-version-0.1.1.6-alpha-2",
"debian-version-0.1.1.6-alpha-1",
"tor-0.1.1.6-alpha",
"debian-version-0.1.1.5-alpha-1",
"tor-0.1.1.5-alpha",
"tor-0.1.1.4-alpha",
"tor-0.1.1.2-alpha",
"tor-0.1.1.1-alpha",
"tor-0.1.0.9-rc",
"tor-0.1.0.14",
"tor-0.1.0.13",
"tor-0.1.0.12",
"tor-0.1.0.11",
"tor-0.1.0.10",
"tor-0.1.0.17",
"tor-0.1.0.16",
"tor-0.1.0.15",
"debian-version-0.1.0.7-rc-200505171420-1",
"tor-0.1.0.7-rc",
"tor-0.1.0.6-rc",
"debian-version-0.1.0.9-rc-1",
"debian-version-0.1.0.8-rc-1",
"debian-version-0.1.0.14-2",
"debian-version-0.1.0.14-1",
"debian-version-0.1.0.13-1",
"debian-version-0.1.0.12-1",
"debian-version-0.1.0.11-1",
"debian-version-0.1.0.11-0-pre.1",
"debian-version-0.1.0.10-0-pre.1",
"tor-0.1.0.5-rc",
"debian-version-0.1.0.5-rc-200504272000-1",
"tor-0.1.0.4-rc",
"debian-version-0.1.0.4-rc-200504232130-1",
"debian-version-0.1.0.3-rc-cvs-200504231630-1",
"debian-version-0.1.0.3-rc-200504231430-1",
"debian-version-0.1.0.17-1",
"debian-version-0.1.0.16-1",
"debian-version-0.1.0.15-1",
"debian-version-0.1.0.3-rc-200504080730-1",
"debian-version-0.1.0.2-rc-cvs-200504062112-1",
"debian-version-0.1.0.2-rc-cvs-200504061620-1",
"debian-version-0.1.0.2-rc-cvs-200504031300-1",
"tor-0.1.0.2-rc",
"debian-version-0.1.0.2-rc-200504011640-1",
"debian-version-0.1.0.2-rc-200504011500-1",
"debian-version-0.1.0.1-rc-cvs-200504010815-1",
"debian-version-0.1.0.1-rc-cvs-200503310807-1",
"tor-0.1.0.1-rc",
"debian-version-0.0.9.9-1",
"debian-version-0.0.9.8-1",
"debian-version-0.0.9.7-1",
"debian-version-0.0.9.6-1",
"debian-version-0.0.9.5-1",
"debian-version-0.0.9.4-1",
"debian-version-0.0.9.3-1",
"debian-version-0.0.9.2-1",
"debian-version-0.0.9.10-1",
"tor-0.0.9.9",
"tor-0.0.9.7",
"tor-0.0.9.6",
"tor-0.0.9.5",
"tor-0.0.9.3",
"tor-0.0.9.2",
"tor-0.0.9.10",
"debian-version-0.0.9.1-1",
"tor-0.0.9.1",
"tor-0.0.9",
"debian-version-0.0.8+0.0.9rc7-1",
"debian-version-0.0.8+0.0.9rc6-1",
"tor-0.0.9rc7",
"tor-0.0.9rc6",
"debian-version-0.0.8+0.0.9rc5-1",
"tor-0.0.9rc5",
"debian-version-0.0.8+0.0.9rc3-1",
"tor-0.0.9rc4",
"tor-0.0.9rc3",
"debian-version-0.0.8+0.0.9rc2-1",
"tor-0.0.9rc2",
"debian-version-0.0.8+0.0.9rc1-1",
"tor-0.0.9rc1",
"debian-version-0.0.8+0.0.9pre6-1",
"tor-0.0.9pre6",
"debian-version-0.0.8+0.0.9pre5-2",
"tor-0.0.9pre5",
"debian-version-0.0.8+0.0.9pre5-1",
"debian-version-0.0.8+0.0.9pre4-1",
"tor-0.0.9pre4",
"debian-version-0.0.8+0.0.9pre3-1",
"tor-0.0.9pre3",
"debian-version-0.0.8+0.0.9pre2-1",
"tor-0.0.9pre2",
"debian-version-0.0.8+0.0.9pre1-1",
"tor-0.0.9pre1",
"debian-version-0.0.8-1",
"tor-0.0.8.1",
"tor-0.0.8",
"debian-version-0.0.7+0.0.8rc1-1",
"tor-0.0.8rc2",
"tor-0.0.8rc1",
"debian-version-0.0.7.2+0.0.8pre3-1",
"tor-0.0.8pre3",
"debian-version-0.0.7.2+0.0.8pre2-1",
"tor-0.0.8pre2",
"tor-0.0.8pre1",
"debian-version-0.0.7.1-1",
"debian-version-0.0.7-1",
"tor-0.0.7",
"tor-0.0.7.2",
"tor-0.0.7.1",
"tor-0.0.7rc1",
"debian-version-0.0.6.2-1",
"debian-version-0.0.6.1-1",
"debian-version-0.0.6-1",
"debian-version-0.0.5+0.0.6rc4-1",
"tor-0.0.6.2",
"tor-0.0.6.1",
"tor-0.0.6",
"debian-version-0.0.5+0.0.6rc3-1",
"debian-version-0.0.5+0.0.6rc2-1",
"tor-0.0.6incompat-merged",
"debian-version-0.0.5-1",
"tor-0.0.5",
"debian-version-0.0.4-1",
"tor-0.0.4",
"debian-version-0.0.3-1",
"tor-0.0.3",
"debian-version-0.0.2-1",
"tor-0.0.2",
"tor-0.0.2pre27",
"debian-version-0.0.1+0.0.2pre27-1",
"debian-version-0.0.1+0.0.2pre26-1",
"debian-version-0.0.1+0.0.2pre25-1",
"tor-0.0.2pre25",
"debian-version-0.0.1+0.0.2pre24-1",
"tor-0.0.2pre24",
"debian-version-0.0.1+0.0.2pre23-1",
"tor-0.0.2pre23",
"debian-version-0.0.1+0.0.2pre22-1",
"tor-0.0.2pre22",
"debian-version-0.0.1+0.0.2pre21-1",
"debian-version-0.0.1+0.0.2pre20-2",
"debian-version-0.0.1+0.0.2pre20-1",
"tor-0.0.2pre20",
"debian-version-0.0.1+0.0.2pre19-1",
"tor-0.0.2pre19",
"tor-0.0.2pre18",
"tor-0.0.2pre17",
"tor-0.0.2pre16",
"tor-0.0.2pre14",
"tor-0.0.2pre13",
"tor-0.0.2pre8"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-8955.json"
}
},
{
"ranges": [
{
"repo": "https://gitlab.torproject.org/tpo/core/tor",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "f3e21c27631ee40603c1cab01b8e6b495689b69c"
},
{
"introduced": "da95b91355248ad8f3a6aa6733cc6d24915f59ce"
},
{
"fixed": "4fd31340f3355342deebf49b586ae38bc2e9c8fe"
},
{
"introduced": "cfff582e4d68b4026d19c4cee4c2d893aaab116f"
},
{
"last_affected": "81f1b89efc94723f2c13b0b80d311364a2245d85"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.3.3.12"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.8"
},
{
"fixed": "0.3.4.11"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.0:alpha-dev:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.0-alpha\\-dev"
},
{
"last_affected": "0.3.4.0-alpha\\-dev"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.1:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.1-alpha"
},
{
"last_affected": "0.3.4.1-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.2:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.2-alpha"
},
{
"last_affected": "0.3.4.2-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.3:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.3-alpha"
},
{
"last_affected": "0.3.4.3-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.4:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.4-rc"
},
{
"last_affected": "0.3.4.4-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.5:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.5-rc"
},
{
"last_affected": "0.3.4.5-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.6:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.6-rc"
},
{
"last_affected": "0.3.4.6-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.4.7:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.4.7-rc"
},
{
"last_affected": "0.3.4.7-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.0:alpha-dev:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.0-alpha\\-dev"
},
{
"last_affected": "0.3.5.0-alpha\\-dev"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.1:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.1-alpha"
},
{
"last_affected": "0.3.5.1-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.2:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.2-alpha"
},
{
"last_affected": "0.3.5.2-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.3:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.3-alpha"
},
{
"last_affected": "0.3.5.3-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.4:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.4-alpha"
},
{
"last_affected": "0.3.5.4-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.5:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.5-alpha"
},
{
"last_affected": "0.3.5.5-alpha"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.6:rc:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.6-rc"
},
{
"last_affected": "0.3.5.6-rc"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.3.5.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.3.5.7"
},
{
"last_affected": "0.3.5.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:torproject:tor:0.4.0.1:alpha:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.0.1-alpha"
},
{
"last_affected": "0.4.0.1-alpha"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"0.3.4.0-alpha\\-dev",
"0.3.4.1-alpha",
"0.3.4.2-alpha",
"0.3.4.3-alpha",
"0.3.4.4-rc",
"0.3.4.5-rc",
"0.3.4.6-rc",
"0.3.4.7-rc",
"0.3.5.0-alpha\\-dev",
"0.3.5.1-alpha",
"0.3.5.2-alpha",
"0.3.5.3-alpha",
"0.3.5.4-alpha",
"0.3.5.5-alpha",
"0.3.5.6-rc",
"0.3.5.7",
"0.4.0.1-alpha",
"tor-0.4.0.1-alpha",
"tor-0.3.3.11",
"tor-0.3.4.10",
"tor-0.3.4.9",
"tor-0.3.5.3-alpha",
"tor-0.3.5.2-alpha",
"tor-0.3.5.1-alpha",
"tor-0.3.3.10",
"tor-0.3.4.8",
"tor-0.3.3.9",
"tor-0.3.3.8",
"tor-0.3.5.0-alpha-dev",
"tor-0.3.3.7",
"tor-0.3.4.2-alpha",
"tor-0.3.3.6",
"tor-0.3.4.1-alpha",
"tor-0.3.3.5-rc",
"tor-0.3.3.4-alpha",
"tor-0.3.3.3-alpha",
"tor-0.3.4.0-alpha-dev",
"tor-0.3.3.2-alpha",
"tor-0.3.3.1-alpha",
"tor-0.3.3.0-alpha-dev",
"tor-0.3.2.2-alpha",
"tor-0.3.2.1-alpha",
"tor-0.3.1.3-alpha",
"tor-0.3.1.2-alpha",
"tor-0.3.1.1-alpha",
"tor-0.3.0.3-alpha",
"tor-0.3.0.2-alpha",
"tor-0.3.0.1-alpha",
"tor-0.2.9.4-alpha",
"tor-0.2.9.3-alpha",
"tor-0.2.9.2-alpha",
"tor-0.2.9.1-alpha",
"tor-0.2.9.0-root",
"tor-0.2.8.2-alpha",
"tor-0.2.8.1-alpha",
"tor-0.2.7.3-rc",
"tor-0.2.7.2-alpha",
"tor-0.2.7.1-alpha",
"tor-0.2.7.0-root",
"tor-0.2.6.3-alpha",
"tor-0.2.6.2-alpha",
"tor-0.2.6.1-alpha",
"tor-0.2.5.5-alpha",
"tor-0.2.5.4-alpha",
"tor-0.2.5.3-alpha",
"tor-0.2.5.2-alpha",
"tor-0.2.5.1-alpha",
"tor-0.2.4.10-alpha",
"tor-0.2.4.9-alpha",
"tor-0.2.4.8-alpha",
"tor-0.2.4.7-alpha",
"tor-0.2.4.6-alpha",
"tor-0.2.4.5-alpha",
"tor-0.2.4.4-alpha",
"tor-0.2.4.3-alpha",
"tor-0.2.4.2-alpha",
"tor-0.2.4.1-alpha",
"tor-0.2.3.17-beta",
"tor-0.2.3.16-alpha",
"tor-0.2.3.15-alpha",
"tor-0.2.3.14-alpha",
"tor-0.2.3.13-alpha",
"tor-0.2.3.12-alpha",
"tor-0.2.3.11-alpha",
"tor-0.2.3.10-alpha",
"tor-0.2.3.9-alpha",
"tor-0.2.3.8-alpha",
"tor-0.2.3.7-alpha",
"tor-0.2.3.6-alpha",
"tor-0.2.3.5-alpha",
"tor-0.2.3.4-alpha",
"tor-0.2.3.3-alpha",
"tor-0.2.3.2-alpha",
"tor-0.2.3.1-alpha",
"tor-0.2.2.16-alpha",
"tor-0.2.2.15-alpha",
"tor-0.2.2.14-alpha",
"tor-0.2.2.13-alpha",
"tor-0.2.2.12-alpha",
"tor-0.2.2.11-alpha",
"tor-0.2.2.10-alpha",
"tor-0.2.2.9-alpha",
"tor-0.2.2.8-alpha",
"tor-0.2.2.7-alpha",
"tor-0.2.2.6-alpha",
"tor-0.2.2.5-alpha",
"tor-0.2.2.4-alpha",
"tor-0.2.2.3-alpha",
"tor-0.2.2.2-alpha",
"tor-0.2.2.1-alpha",
"tor-0.2.1.14-rc",
"tor-0.2.1.13-alpha",
"tor-0.2.1.11-alpha",
"tor-0.2.1.10-alpha",
"tor-0.2.1.9-alpha",
"tor-0.2.1.8-alpha",
"tor-0.2.1.7-alpha",
"tor-0.2.1.6-alpha",
"tor-0.2.1.5-alpha",
"tor-0.2.1.4-alpha",
"tor-0.2.1.3-alpha",
"tor-0.2.1.2-alpha",
"tor-0.2.1.1-alpha",
"tor-0.2.0.20-rc",
"tor-0.2.0.19-alpha",
"tor-0.2.0.18-alpha",
"tor-0.2.0.17-alpha",
"tor-0.2.0.16-alpha",
"tor-0.2.0.15-alpha",
"tor-0.2.0.14-alpha",
"tor-0.2.0.13-alpha",
"tor-0.2.0.12-alpha",
"tor-0.2.0.11-alpha",
"tor-0.2.0.10-alpha",
"tor-0.2.0.9-alpha",
"tor-0.2.0.8-alpha",
"tor-0.2.0.7-alpha",
"tor-0.2.0.6-alpha",
"tor-0.2.0.5-alpha",
"tor-0.2.0.4-alpha@11197",
"tor-0.2.0.3-alpha",
"tor-0.2.0.2-alpha",
"tor-0.2.0.1-alpha",
"tor-0.1.2.9-rc",
"tor-0.1.2.8-beta",
"tor-0.1.2.7-alpha",
"tor-0.1.2.6-alpha",
"tor-0.1.2.5-alpha",
"tor-0.1.2.4-alpha",
"tor-0.1.2.3-alpha",
"tor-0.1.2.2-alpha",
"tor-0.1.2.1-alpha",
"tor-0.1.1.18-rc",
"tor-0.1.1.22",
"tor-0.1.1.21",
"tor-0.1.1.20",
"tor-0.1.1.19-rc",
"debian-version-0.1.1.18-rc-1",
"debian-version-0.1.1.22-1",
"debian-version-0.1.1.21-1",
"debian-version-0.1.1.20-1",
"debian-version-0.1.1.19-rc-1",
"debian-version-0.1.1.17-rc-1",
"tor-0.1.1.17-rc",
"debian-version-0.1.1.16-rc-1",
"tor-0.1.1.16-rc",
"tor-0.1.1.15-rc",
"debian-version-0.1.1.15-rc-1",
"debian-version-0.1.1.14-alpha-1",
"tor-0.1.1.14-alpha",
"debian-version-0.1.1.13-alpha-1",
"tor-0.1.1.13-alpha",
"debian-version-0.1.1.12-alpha-1",
"tor-0.1.1.12-alpha",
"debian-version-0.1.1.11-alpha-1",
"tor-0.1.1.11-alpha",
"debian-version-0.1.1.10-alpha-1",
"tor-0.1.1.10-alpha",
"debian-version-0.1.1.9-alpha-1",
"tor-0.1.1.9-alpha",
"debian-version-0.1.1.8-alpha-1",
"tor-0.1.1.8-alpha",
"debian-version-0.1.1.7-alpha-1",
"tor-0.1.1.7-alpha",
"debian-version-0.1.1.6-alpha-2",
"debian-version-0.1.1.6-alpha-1",
"tor-0.1.1.6-alpha",
"debian-version-0.1.1.5-alpha-1",
"tor-0.1.1.5-alpha",
"tor-0.1.1.4-alpha",
"tor-0.1.1.2-alpha",
"tor-0.1.1.1-alpha",
"tor-0.1.0.9-rc",
"tor-0.1.0.14",
"tor-0.1.0.13",
"tor-0.1.0.12",
"tor-0.1.0.11",
"tor-0.1.0.10",
"tor-0.1.0.17",
"tor-0.1.0.16",
"tor-0.1.0.15",
"debian-version-0.1.0.7-rc-200505171420-1",
"tor-0.1.0.7-rc",
"tor-0.1.0.6-rc",
"debian-version-0.1.0.9-rc-1",
"debian-version-0.1.0.8-rc-1",
"debian-version-0.1.0.14-2",
"debian-version-0.1.0.14-1",
"debian-version-0.1.0.13-1",
"debian-version-0.1.0.12-1",
"debian-version-0.1.0.11-1",
"debian-version-0.1.0.11-0-pre.1",
"debian-version-0.1.0.10-0-pre.1",
"tor-0.1.0.5-rc",
"debian-version-0.1.0.5-rc-200504272000-1",
"tor-0.1.0.4-rc",
"debian-version-0.1.0.4-rc-200504232130-1",
"debian-version-0.1.0.3-rc-cvs-200504231630-1",
"debian-version-0.1.0.3-rc-200504231430-1",
"debian-version-0.1.0.17-1",
"debian-version-0.1.0.16-1",
"debian-version-0.1.0.15-1",
"debian-version-0.1.0.3-rc-200504080730-1",
"debian-version-0.1.0.2-rc-cvs-200504062112-1",
"debian-version-0.1.0.2-rc-cvs-200504061620-1",
"debian-version-0.1.0.2-rc-cvs-200504031300-1",
"tor-0.1.0.2-rc",
"debian-version-0.1.0.2-rc-200504011640-1",
"debian-version-0.1.0.2-rc-200504011500-1",
"debian-version-0.1.0.1-rc-cvs-200504010815-1",
"debian-version-0.1.0.1-rc-cvs-200503310807-1",
"tor-0.1.0.1-rc",
"debian-version-0.0.9.9-1",
"debian-version-0.0.9.8-1",
"debian-version-0.0.9.7-1",
"debian-version-0.0.9.6-1",
"debian-version-0.0.9.5-1",
"debian-version-0.0.9.4-1",
"debian-version-0.0.9.3-1",
"debian-version-0.0.9.2-1",
"debian-version-0.0.9.10-1",
"tor-0.0.9.9",
"tor-0.0.9.7",
"tor-0.0.9.6",
"tor-0.0.9.5",
"tor-0.0.9.3",
"tor-0.0.9.2",
"tor-0.0.9.10",
"debian-version-0.0.9.1-1",
"tor-0.0.9.1",
"tor-0.0.9",
"debian-version-0.0.8+0.0.9rc7-1",
"debian-version-0.0.8+0.0.9rc6-1",
"tor-0.0.9rc7",
"tor-0.0.9rc6",
"debian-version-0.0.8+0.0.9rc5-1",
"tor-0.0.9rc5",
"debian-version-0.0.8+0.0.9rc3-1",
"tor-0.0.9rc4",
"tor-0.0.9rc3",
"debian-version-0.0.8+0.0.9rc2-1",
"tor-0.0.9rc2",
"debian-version-0.0.8+0.0.9rc1-1",
"tor-0.0.9rc1",
"debian-version-0.0.8+0.0.9pre6-1",
"tor-0.0.9pre6",
"debian-version-0.0.8+0.0.9pre5-2",
"tor-0.0.9pre5",
"debian-version-0.0.8+0.0.9pre5-1",
"debian-version-0.0.8+0.0.9pre4-1",
"tor-0.0.9pre4",
"debian-version-0.0.8+0.0.9pre3-1",
"tor-0.0.9pre3",
"debian-version-0.0.8+0.0.9pre2-1",
"tor-0.0.9pre2",
"debian-version-0.0.8+0.0.9pre1-1",
"tor-0.0.9pre1",
"debian-version-0.0.8-1",
"tor-0.0.8.1",
"tor-0.0.8",
"debian-version-0.0.7+0.0.8rc1-1",
"tor-0.0.8rc2",
"tor-0.0.8rc1",
"debian-version-0.0.7.2+0.0.8pre3-1",
"tor-0.0.8pre3",
"debian-version-0.0.7.2+0.0.8pre2-1",
"tor-0.0.8pre2",
"tor-0.0.8pre1",
"debian-version-0.0.7.1-1",
"debian-version-0.0.7-1",
"tor-0.0.7",
"tor-0.0.7.2",
"tor-0.0.7.1",
"tor-0.0.7rc1",
"debian-version-0.0.6.2-1",
"debian-version-0.0.6.1-1",
"debian-version-0.0.6-1",
"debian-version-0.0.5+0.0.6rc4-1",
"tor-0.0.6.2",
"tor-0.0.6.1",
"tor-0.0.6",
"debian-version-0.0.5+0.0.6rc3-1",
"debian-version-0.0.5+0.0.6rc2-1",
"tor-0.0.6incompat-merged",
"debian-version-0.0.5-1",
"tor-0.0.5",
"debian-version-0.0.4-1",
"tor-0.0.4",
"debian-version-0.0.3-1",
"tor-0.0.3",
"debian-version-0.0.2-1",
"tor-0.0.2",
"tor-0.0.2pre27",
"debian-version-0.0.1+0.0.2pre27-1",
"debian-version-0.0.1+0.0.2pre26-1",
"debian-version-0.0.1+0.0.2pre25-1",
"tor-0.0.2pre25",
"debian-version-0.0.1+0.0.2pre24-1",
"tor-0.0.2pre24",
"debian-version-0.0.1+0.0.2pre23-1",
"tor-0.0.2pre23",
"debian-version-0.0.1+0.0.2pre22-1",
"tor-0.0.2pre22",
"debian-version-0.0.1+0.0.2pre21-1",
"debian-version-0.0.1+0.0.2pre20-2",
"debian-version-0.0.1+0.0.2pre20-1",
"tor-0.0.2pre20",
"debian-version-0.0.1+0.0.2pre19-1",
"tor-0.0.2pre19",
"tor-0.0.2pre18",
"tor-0.0.2pre17",
"tor-0.0.2pre16",
"tor-0.0.2pre14",
"tor-0.0.2pre13",
"tor-0.0.2pre8"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-8955.json"
}
}
],
"modified": "2026-10-24T10:30:23.182013047Z",
"provider": "osv",
"references": [
"https://blog.torproject.org/new-releases-tor-0402-alpha-0358-03411-and-03312",
"https://trac.torproject.org/projects/tor/ticket/29168"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2019-8955",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 430867,
"published_at": "2019-02-21T23:29:00.267+00:00"
}