UnratedFix available
tor — security advisory
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.
- Products
- tor
- Affected versions
- Not specified
- Fixed versions
- 0.1.2.14-1
- CVEs
- CVE-2007-3165
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 15:48 UTC · Revision 1
Source evidence
Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.
osv:DEBIAN-CVE-2007-3165
tor
Fixed versions: 0.1.2.14-1
tor
Fixed versions: 0.1.2.14-1
tor
Fixed versions: 0.1.2.14-1
Complete source record
{
"id": "948e3b23dc3f84cac27a7b3894af6be82598bf8a4b930144c2ae12aeac5ee122",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2007-3165",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2007-3165",
"summary": "Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.",
"evidence": "osv:DEBIAN-CVE-2007-3165",
"products": [
{
"name": {
"value": "tor",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.1.2.14-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tor",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.1.2.14-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tor",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.1.2.14-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2007-3165",
"aliases": [
"DEBIAN-CVE-2007-3165"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.1.2.14-1"
}
]
}
],
"package": {
"name": "tor",
"purl": "pkg:deb/debian/tor?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3165.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.1.2.14-1"
}
]
}
],
"package": {
"name": "tor",
"purl": "pkg:deb/debian/tor?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3165.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.1.2.14-1"
}
]
}
],
"package": {
"name": "tor",
"purl": "pkg:deb/debian/tor?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3165.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
}
],
"modified": "2026-10-21T17:47:41.234978598Z",
"provider": "osv",
"upstream": [
"CVE-2007-3165"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2007-3165"
]
},
"related_cves": [
{
"value": "CVE-2007-3165",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 398481,
"published_at": "2007-06-11T22:30:00+00:00"
}