← Database

CVE-2021-34549

HIGH CVSS: 7.5 Published: 2021-06-29 Modified: 2026-06-17

Description

An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circuit data. Consequently. an attacker can trigger the use of an attacker-chosen circuit ID to cause algorithm inefficiency.

Affected Platforms

Torproject Tor

Weakness Type

CWE-400

References