Read the docs
TI-2007-03062 Aliases CVE-2007-3165GHSA-p2h5-374v-r86q

Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family…

Priority LOW 26Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.

Why it matters now

EPSS 0.01482 74th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*0.0.9VulnerableTor
cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*0.0.9.1VulnerableTor
cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*0.0.9.2VulnerableTor
cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*0.0.9.3VulnerableTor
cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*0.0.9.4VulnerableTor
cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*0.0.9.5VulnerableTor
cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*0.0.9.6VulnerableTor
cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*0.0.9.7VulnerableTor
cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*0.0.9.8VulnerableTor
cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*0.0.9.9VulnerableTor
  • cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:* Versions 0.0.9 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:* Versions 0.0.9.1 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:* Versions 0.0.9.2 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:* Versions 0.0.9.3 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:* Versions 0.0.9.4 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:* Versions 0.0.9.5 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:* Versions 0.0.9.6 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:* Versions 0.0.9.7 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:* Versions 0.0.9.8 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:* Versions 0.0.9.9 Vulnerable ·Tor
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*0.0.9.10VulnerableTor
cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*0.1.0.10VulnerableTor
cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*0.1.0.11VulnerableTor
cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*0.1.0.12VulnerableTor
cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*0.1.0.13VulnerableTor
cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*0.1.0.14VulnerableTor
cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*0.1.1.1_alphaVulnerableTor
cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*0.1.1.2_alphaVulnerableTor
cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*0.1.1.3_alphaVulnerableTor
cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*0.1.1.4_alphaVulnerableTor
cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*0.1.1.5_alphaVulnerableTor
cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*0.1.1.20VulnerableTor
cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*0.1.1.23VulnerableTor
cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*0.1.2.1_alpha-cvsVulnerableTor
  • cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:* Versions 0.0.9.10 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:* Versions 0.1.0.10 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:* Versions 0.1.0.11 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:* Versions 0.1.0.12 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:* Versions 0.1.0.13 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:* Versions 0.1.0.14 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:* Versions 0.1.1.1_alpha Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:* Versions 0.1.1.2_alpha Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:* Versions 0.1.1.3_alpha Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:* Versions 0.1.1.4_alpha Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:* Versions 0.1.1.5_alpha Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:* Versions 0.1.1.20 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:* Versions 0.1.1.23 Vulnerable ·Tor
  • cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:* Versions 0.1.2.1_alpha-cvs Vulnerable ·Tor

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-3165
  2. 2026-10-03 Alias added: GHSA-p2h5-374v-r86q

References

Other 3

  • TI-2010-01618 Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha… CVSS 2.0HIGH 10.0
  • TI-2009-00394 Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack… CVSS 2.0HIGH 10.0
  • TI-2009-00893 Tor before 0.2.0.34 treats incomplete IPv4 addresses as valid, which has unknown impact… CVSS 2.0HIGH 10.0
  • TI-2008-05138 Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses… CVSS 2.0HIGH 9.3
  • TI-2011-02436 Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to… CVSS 2.0HIGH 7.6
  • TI-2006-03307 Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code… CVSS 2.0HIGH 7.5
See all 56 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences