cbcvebase.
CVE-2011-4895
published 2011-12-23

CVE-2011-4895: Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for…

medium4.3CVSS 3.1
AVNACMAuNCPINAN
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building.

Affected

210 ranges· showing 25
VendorProductVersion rangeFixed in
debiantor< tor 0.2.2.34-1 (bookworm)tor 0.2.2.34-1 (bookworm)
tortor<= 0.2.2.33
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor

CVSS provenance

nvd4.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv4.3MEDIUM