High severity7.5NVD Advisory· Published Jun 29, 2021· Updated Jun 17, 2026
CVE-2021-34548
CVE-2021-34548
Description
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for ending a stream.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Tor/Tordescription
- Range: <0.4.6.5
- osv-coords3 versionspkg:rpm/opensuse/tor&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/tor&distro=openSUSE%20Tumbleweedpkg:rpm/suse/tor&distro=SUSE%20Package%20Hub%2015%20SP2
< 0.4.5.9-lp152.2.12.1+ 2 more
- (no CPE)range: < 0.4.5.9-lp152.2.12.1
- (no CPE)range: < 0.4.6.7-2.2
- (no CPE)range: < 0.4.5.9-bp152.2.12.1
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/163510/Tor-Half-Closed-Connection-Stream-Confusion.htmlnvdThird Party AdvisoryVDB Entry
- blog.torproject.org/node/2041nvdRelease NotesVendor Advisory
- security.gentoo.org/glsa/202107-25nvdThird Party Advisory
- gitlab.torproject.org/tpo/core/tor/-/issues/40389nvdBroken Link
News mentions
0No linked articles in our index yet.