CVE-2017-0377

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers…

published July 2, 2017

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02446 · 84.1th percentile
Published
2017-07-02T15:00Z
EPSS history
Timeline
  • 02 JUL 15:00Z
    Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers…
    cvelistv5