CVE-2014-5117

Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for…

published July 30, 2014

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAY_EARLY cells as a means of communicating information about hidden service names.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02104 · 81.5th percentile
Published
2014-07-30T16:00Z
EPSS history
Timeline
  • 30 JUL 16:00Z
    Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for…
    cvelistv5