CVE-2014-5117

Tor before 0.2.4.23 and 0.2.5 before 0.2.5.6-alpha maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern of RELAY and RELAY_EARLY cells as a means of communicating information about hidden service names.

• torproject tor (<= 0.2.4.22) • torproject tor 0.0.2 • torproject tor 0.0.3 • torproject tor 0.0.4 • torproject tor 0.0.5 • torproject tor 0.0.6 • torproject tor 0.0.6.1 • torproject tor 0.0.6.2 • torproject tor 0.0.7 • torproject tor 0.0.7.1 • torproject tor 0.0.7.2 • torproject tor 0.0.7.3 • torproject tor 0.0.8.1 • torproject tor 0.0.9.1 • torproject tor 0.0.9.2 • torproject tor 0.0.9.3 • torproject tor 0.0.9.4 • torproject tor 0.0.9.5 • torproject tor 0.0.9.6 • torproject tor 0.0.9.7 • torproject tor 0.0.9.8 • torproject tor 0.0.9.9 • torproject tor 0.0.9.10 • torproject tor 0.1.0.10 • torproject tor 0.1.0.11 • torproject tor 0.1.0.12 • torproject tor 0.1.0.13 • torproject tor 0.1.0.14 • torproject tor 0.1.0.15 • torproject tor 0.1.0.16 • torproject tor 0.1.0.17 • torproject tor 0.1.1.20 • torproject tor 0.1.1.21 • torproject tor 0.1.1.22 • torproject tor 0.1.1.23 • torproject tor 0.1.1.24 • torproject tor 0.1.1.25 • torproject tor 0.1.1.26 • torproject tor 0.1.2.13 • torproject tor 0.1.2.14 • torproject tor 0.1.2.15 • torproject tor 0.1.2.16 • torproject tor 0.1.2.17 • torproject tor 0.1.2.18 • torproject tor 0.1.2.19 • torproject tor 0.2.0.30 • torproject tor 0.2.0.31 • torproject tor 0.2.0.32 • torproject tor 0.2.0.33 • torproject tor 0.2.0.34 • torproject tor 0.2.0.35 • torproject tor 0.2.2.18 • torproject tor 0.2.2.19 • torproject tor 0.2.2.20 • torproject tor 0.2.2.21 • torproject tor 0.2.2.22 • torproject tor 0.2.2.23 • torproject tor 0.2.2.24 • torproject tor 0.2.2.25 • torproject tor 0.2.2.26 … and 49 more