CVE-2017-8822 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Information disclosure |
| Description | In Tor before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-539 | tor | 0.3.1.8-1 | 0.3.1.9-1 | High | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 16 Dec 2017 | ASA-201712-10 | AVG-539 | tor | High | multiple issues |
| References |
|---|
https://bugs.torproject.org/21534 https://bugs.torproject.org/24333 |