CVE-2012-3519
published 2012-08-26CVE-2012-3519: routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote…
medium5CVSS 3.1
AVNACLAuNCPINAN
routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tor | < tor 0.2.3.20-rc-1 (bookworm) | tor 0.2.3.20-rc-1 (bookworm) |
| tor | tor | <= 0.2.2.37 | — |
| torproject | tor | >= 0 < 0.2.3.20-rc-1 | 0.2.3.20-rc-1 |
| torproject | tor | >= 0 < 0.2.3.20-rc-1 | 0.2.3.20-rc-1 |
| torproject | tor | >= 0 < 0.2.3.20-rc-1 | 0.2.3.20-rc-1 |
| torproject | tor | >= 0 < 0.2.3.20-rc-1 | 0.2.3.20-rc-1 |
CVSS provenance
nvd5.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv5.0MEDIUM