CVE-2012-3519: Tor

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack.

Affected products

• Tor Tor: up to and including 0.2.2.37

Published 2012-08-26. Last modified 2026-06-16.