Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an assertion failure, aka TROVE-2021-002.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade tor | Aug 22, 2024 | Mar 19, 2021 |
| Debian | — | Upgrade tor | Mar 18, 2021 | Mar 18, 2021 |
| Gentoo Linux | — | Upgrade net-vpn/tor. | Jul 12, 2021 | Mar 19, 2021 |
| Suse | — | Upgrade tor | Mar 25, 2021 | Mar 19, 2021 |
| Ubuntu | — | Upgrade tor (Ubuntu Pro) | Mar 22, 2023 | Mar 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub