Not rated
CVE-2017-0377 Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's…
Description
Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tor | Versions not published |
Other CVEs of Tor
The 4 CVEs of Tor →
CVE-2025-4444
A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17
6.3
Medium
CVE-2018-0490
An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10
Not rated
CVE-2018-0491
A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10
Not rated