CVE-2017-8822

Source
Severity High
Remote Yes
Type Information disclosure
Description
In Tor before 0.3.1.9, relays (that have incompletely downloaded descriptors) can pick themselves in a circuit path, leading to a degradation of anonymity, aka TROVE-2017-012.
Group Package Affected Fixed Severity Status Ticket
AVG-539 tor 0.3.1.8-1 0.3.1.9-1 High Fixed
Date Advisory Group Package Severity Description
16 Dec 2017 ASA-201712-10 AVG-539 tor High multiple issues
References
https://bugs.torproject.org/21534
https://bugs.torproject.org/24333