CVE-2007-4097: Tor

Medium severity, CVSS 6.4. EPSS: 2.2% chance of exploitation in the next 30 days.

Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications.

Affected products

• Tor Tor: version 0.1.0.10 only; version 0.1.0.11 only; version 0.1.0.12 only; version 0.1.0.13 only; version 0.1.0.14 only; version 0.1.0.18 only; …

Published 2007-07-30. Last modified 2026-06-16.