In Tor prior to 0.2.5.16, 0.2.6 up to and including 0.2.8 prior to 0.2.8.17, 0.2.9 prior to 0.2.9.14, 0.3.0 prior to 0.3.0.13, and 0.3.1 prior to 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
tor project tor |
||
debian debian linux 9.0 |
||
debian debian linux 8.0 |
Vulmon