| Package | Affected versions | Patched versions |
|---|---|---|
| tor | = 0.0.9= 0.0.9.1= 0.0.9.2= 0.0.9.3= 0.0.9.4= 0.0.9.5= 0.0.9.6= 0.0.9.7= 0.0.9.8= 0.0.9.9= 0.1.0.1= 0.1.0.10= 0.1.0.11= 0.1.0.12= 0.1.0.13= 0.1.0.2= 0.1.0.3= 0.1.0.4= 0.1.0.5= 0.1.0.6= 0.1.0.7= 0.1.0.8= 0.1.0.9= 0.1.1.1_alpha= 0.1.1.2_alpha= 0.1.1.3_alpha= 0.1.1.4_alpha |
Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free