Debian/tor: unknown

Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.

Action: Upgrade tor to 0.1.2.15-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-4098#Debian:13/tor
• https://security-tracker.debian.org/tracker/CVE-2007-4098

published 2007-07-30T21:17:00Z · modified 2026-10-21T17:47:46.558144819Z · JSON