Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade tor | Jul 30, 2024 | Aug 23, 2005 |
| Freebsd | — | Upgrade tor | Dec 10, 2025 | Aug 17, 2005 |
| Gentoo Linux | — | Upgrade net-misc/tor. | Oct 30, 2017 | Aug 23, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub