Vulnerabilities (CVE)

Filtered by vendor Tor Project Subscribe
Filtered by product Tor
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-8822 2 Debian, Tor Project 2 Debian Linux, Tor 2017-12-21 4.3 MEDIUM 3.7 LOW
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012.