CVE-2011-2768

Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to…

published December 23, 2011

CVSS
—
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had selected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00723 · 53.2th percentile
Published
2011-12-23T02:00Z
EPSS history
Timeline
  • 23 DEC 02:00Z
    Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to…
    cvelistv5