Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade tor | Jul 30, 2024 | Jan 25, 2006 |
| Freebsd | — | Upgrade tor | Dec 10, 2025 | Feb 16, 2006 |
| Gentoo Linux | — | Upgrade net-misc/tor. | Oct 30, 2017 | Jan 25, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub