CVE-2011-2768

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-12-23 · updated 2026-06-16
Weakness: CWE-264

Description

Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had selected.

Affected products

Tor: through 0.2.2.33; 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.6.1 (+222)

References

http://www.debian.org/security/2011/dsa-2331
https://blog.torproject.org/blog/tor-02234-released-security-patches
http://www.debian.org/security/2011/dsa-2331
https://blog.torproject.org/blog/tor-02234-released-security-patches

Get alerted when CVE-2011-2768 or the next vulnerability affects your stack