Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-38385
7.5
HIGHCVSS v3
Published
August 30, 2021
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007.
torproject/tor
GitHubunofficial git repo -- report bugs/issues/pull requests on https://gitlab.torproject.org/ --
GitHubunofficial git repo -- report bugs/issues/pull requests on https://gitlab.torproject.org/ -->= 0.4.6.0, < 0.4.6.7, >= 0.4.0.0, < 0.4.5.10, < 0.3.5.16NVD