CVE-2009-2426: Tor

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information.

Affected products

• Tor Tor: version 0.1.0.1 only; version 0.1.0.2 only; version 0.1.0.3 only; version 0.1.0.4 only; version 0.1.0.5 only; version 0.1.0.6 only; …

Published 2009-07-10. Last modified 2026-06-16.