Debian/tor: unknown
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users
Action: Upgrade tor to 0.1.1.20-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.1.20-1 | - |
Fixed versions
| 0.1.1.20-1 |
Sources
published · modified · JSON