VULNERABILITY INTELLIGENCE

CVE-2007-4098

CVSS score5.8 MEDIUM
EPSS probability1.90%
CISA KEVNot currently listed
Published2007-07-30
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:P

Description

Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.

Primary references