CVE-2010-0384: Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the c...

Security readout for executives and security teams

This issue could expose Tor client IP addresses in logs on vulnerable Tor directory mirrors. It does not describe code execution or system takeover, but it can undermine user privacy if local users can read those logs. Likely limited to organizations that operated Tor 0.2.2.x directory mirrors before 0.2.2.7-alpha. The provided affected data lacks structured vendor, product, version, and CPE details beyond the CVE description. Prioritize if your organization operates Tor directory mirrors or preserves old Tor logs. For most environments, business urgency is low unless privacy obligations or sensitive client anonymity are involved. Mitigation focus: Inventory Tor nodes and identify any operating as directory mirrors.; Upgrade Tor 0.2.2.x directory mirrors to 0.2.2.7-alpha or later supported releases.; Restrict access to Tor logs to authorized administrators only..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.