Lucene search

K
redhatcveRedhat.comRH:CVE-2021-38385
HistoryMay 20, 2022 - 10:59 p.m.

CVE-2021-38385

2022-05-2022:59:54
redhat.com
access.redhat.com
13
tor
batch-signature
single-signature
verification
assertion failure
trove-2021-007
remote

EPSS

0.002

Percentile

64.8%

Tor before 0.3.5.16, 0.4.5.10, and 0.4.6.7 mishandles the relationship between batch-signature verification and single-signature verification, leading to a remote assertion failure, aka TROVE-2021-007.