| Package | Affected versions | Patched versions |
|---|---|---|
| tor | ≥ 0.4.0.0, < 0.4.4.9≥ 0.4.5.0, < 0.4.5.9≥ 0.4.6.0, < 0.4.6.5< 0.3.5.15 | 0.4.4.90.4.5.90.4.6.50.3.5.15 |
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circuit data. Consequently. an attacker can trigger the use of an attacker-chosen circuit ID to cause algorithm inefficiency.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free