An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for ending a stream.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.3.5.15"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.0.0"
},
{
"fixed": "0.4.4.9"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.5.0"
},
{
"fixed": "0.4.5.9"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.6.0"
},
{
"fixed": "0.4.6.5"
}
],
"source": "CPE_RANGE"
}
]
}
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.3.5.15"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.0.0"
},
{
"fixed": "0.4.4.9"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.5.0"
},
{
"fixed": "0.4.5.9"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.6.0"
},
{
"fixed": "0.4.6.5"
}
],
"source": "CPE_RANGE"
}
]
}