Read the docs
TI-2017-00352 Aliases CVE-2017-0377GHSA-vxgf-qp88-w686

Information disclosure in Tor

Priority LOW 38CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allow remote attackers to defeat intended anonymity properties by leveraging the existence of large families.

Why it matters now

EPSS 0.02446 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—TorTor—No fix listedCNA
  • Tor Vendor— Affected Tor Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:a:torproject:tor:0.3.0.1:alpha:*:*:*:*:*:*0.3.0.1 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.3.0.2:alpha:*:*:*:*:*:*0.3.0.2 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.3.0.3:alpha:*:*:*:*:*:*0.3.0.3 alphaVulnerabletorproject
cpe:2.3:a:torproject:tor:0.3.0.4:*:*:*:*:*:*:*0.3.0.4Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.3.0.5:*:*:*:*:*:*:*0.3.0.5Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.3.0.6:*:*:*:*:*:*:*0.3.0.6Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.3.0.7:*:*:*:*:*:*:*0.3.0.7Vulnerabletorproject
cpe:2.3:a:torproject:tor:0.3.0.8:*:*:*:*:*:*:*0.3.0.8Vulnerabletorproject
  • cpe:2.3:a:torproject:tor:0.3.0.1:alpha:*:*:*:*:*:* Versions 0.3.0.1 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.3.0.2:alpha:*:*:*:*:*:* Versions 0.3.0.2 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.3.0.3:alpha:*:*:*:*:*:* Versions 0.3.0.3 alpha Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.3.0.4:*:*:*:*:*:*:* Versions 0.3.0.4 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.3.0.5:*:*:*:*:*:*:* Versions 0.3.0.5 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.3.0.6:*:*:*:*:*:*:* Versions 0.3.0.6 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.3.0.7:*:*:*:*:*:*:* Versions 0.3.0.7 Vulnerable ·torproject
  • cpe:2.3:a:torproject:tor:0.3.0.8:*:*:*:*:*:*:* Versions 0.3.0.8 Vulnerable ·torproject

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-0377
  2. 2026-10-03 Alias added: GHSA-vxgf-qp88-w686

References

Patch 1

Advisory 4

  • TI-2016-07433 Use after free in Mozilla Firefox KEVCVSS 3.1HIGH 7.5
  • TI-2023-09419 The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4… CVSS 3.1MEDIUM 6.5
  • TI-2018-00448 Use after free in Tor CVSS 3.0HIGH 7.5
  • TI-2026-54108 Race condition in torproject Tor CVSS 3.1CRITICAL 9.0
  • TI-2026-54112 Out-of-bounds write in torproject Tor CVSS 3.1CRITICAL 9.3
  • TI-2026-32508 Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell… CVSS 3.1CRITICAL 9.1
See all 47 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences