Unrated severityNVD Advisory· Published Dec 9, 2008· Updated Jun 16, 2026
CVE-2008-5398
CVE-2008-5398
Description
Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations where an exit relay issues a policy-based refusal of a stream, which allows remote exit relays to have an unknown impact by mapping an internal IP address to the destination hostname of a refused stream.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
101cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*+ 99 more
- cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*range: <=0.1.2.31
- cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.2.15:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.2.17:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.2.18:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.2.19:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*
- cpe:2.3:a:tor:tor:0.1.2.30:*:*:*:*:*:*:*
- Range: <0.2.0.32
Patches
Vulnerability mechanics
References
7- blog.torproject.org/blog/tor-0.2.0.32-releasednvdPatch
- www.securityfocus.com/bid/32648nvdPatch
- secunia.com/advisories/33025nvdVendor Advisory
- secunia.com/advisories/34583nvd
- security.gentoo.org/glsa/glsa-200904-11.xmlnvd
- www.vupen.com/english/advisories/2008/3366nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/47102nvd
News mentions
0No linked articles in our index yet.