Unrated

Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading...

CVE-2021-38385 First seen on SecPulse Aug 30, 2021

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2021-38385 tor Fixed in: 0.4.5.10-1

Original description The description as published by the source.

Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory blog.torproject.org
advisory blog.torproject.org
advisory security.gentoo.org
report bugs.torproject.org

Key facts

Severity: Unrated
Published: Aug 30, 2021
First seen on SecPulse: Aug 30, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54