VDB

CVE-2020-8516

CVE-2020-8516 PUBLISHED CVSS 5.300000190734863 MEDIUM

The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to discover circuit information. NOTE: The network team of Tor claims this is an intended behavior and not a vulnerability

EPSS 2.50% · 84.6th percentile

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
2.50%
84.6th percentile

Affected Products

VendorProductVersions
torprojecttor0, 0.4.2.0
n/an/an/a

Timeline

  • Feb 2, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • Jul 5, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
  • Jan 11, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›