Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00045
Percentile: 0.13549

CVSS Scoring

Affected Products

• cpe:2.3:a:tor:tor:*:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.2.15:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.2.17:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.2.18:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.2.19:*:*:*:*:*:*:*
• cpe:2.3:a:tor:tor:0.1.2.30:*:*:*:*:*:*:*

← Back to Home