Lucene search

GitHub Advisory DatabaseGHSA-9328-GCFQ-P269

HistoryMay 18, 2024 - 12:30 a.m.

Tor Arti's STUB circuits incorrectly have a length of 2

2024-05-1800:30:42

CWE-754

GitHub Advisory Database

github.com

tor arti

stub circuits

length vulnerability

trove-2024-003

software

AI Score

7.1

Confidence

Low

In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 (with lite vanguards), aka TROVE-2024-003.

Affected configurations

Vulners

Node

tor-circmgrMatch0.18.0

artiMatch1.2.2

VendorProductVersionCPE
*tor-circmgr0.18.0cpe:2.3:a:*:tor-circmgr:0.18.0:*:*:*:*:*:*:*
*arti1.2.2cpe:2.3:a:*:arti:1.2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
*	tor-circmgr	0.18.0	cpe:2.3:a::tor-circmgr:0.18.0:::::::
*	arti	1.2.2	cpe:2.3:a::arti:1.2.2:::::::

github.com/advisories/GHSA-9328-gcfq-p269

gitlab.torproject.org/tpo/core/arti/-/blob/main/CHANGELOG.md#arti-123-15-may-2024

gitlab.torproject.org/tpo/core/arti/-/commit/da95138c14f762c706e46e89c6adfa46fcd5252c

gitlab.torproject.org/tpo/core/arti/-/issues/1409

gitlab.torproject.org/tpo/core/arti/-/merge_requests/2145

gitlab.torproject.org/tpo/core/arti/-/merge_requests/2154

gitlab.torproject.org/tpo/core/arti/-/merge_requests/2156

gitlab.torproject.org/tpo/core/team/-/wikis/NetworkTeam/TROVE

nvd.nist.gov/vuln/detail/CVE-2024-35312

rustsec.org/advisories/RUSTSEC-2024-0339.html

AI Score

7.1

Confidence

Low

Related for GHSA-9328-GCFQ-P269