High severity7.5NVD Advisory· Published Jun 29, 2021· Updated Jun 17, 2026
CVE-2021-34549
CVE-2021-34549
Description
An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circuit data. Consequently. an attacker can trigger the use of an attacker-chosen circuit ID to cause algorithm inefficiency.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Tor/Tordescription
- Range: <0.4.6.5
- osv-coords3 versionspkg:rpm/opensuse/tor&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/tor&distro=openSUSE%20Tumbleweedpkg:rpm/suse/tor&distro=SUSE%20Package%20Hub%2015%20SP2
< 0.4.5.9-lp152.2.12.1+ 2 more
- (no CPE)range: < 0.4.5.9-lp152.2.12.1
- (no CPE)range: < 0.4.6.7-2.2
- (no CPE)range: < 0.4.5.9-bp152.2.12.1
Patches
Vulnerability mechanics
References
3- blog.torproject.org/node/2041nvdRelease NotesVendor Advisory
- security.gentoo.org/glsa/202107-25nvdThird Party Advisory
- gitlab.torproject.org/tpo/core/tor/-/issues/40391nvdBroken Link
News mentions
0No linked articles in our index yet.