CVE-2022-33903
HIGH
Published Jul 17, 20223y ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
Published Jul 17, 2022 3y ago
Last Modified Jun 17, 2026 2w ago
Description
Tor 0.4.7.x before 0.4.7.8 allows a denial of service via the wedging of RTT estimation.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
Patch Available
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| torproject | tor | * | ≥0.4.7.1 – <0.4.7.8 |
References 3
- lists.torproject.org https://lists.torproject.org/pipermail/tor-announce/2022-June/000242.html
- security-tracker.debian.org https://security-tracker.debian.org/tracker/CVE-2022-33903
- security.gentoo.org https://security.gentoo.org/glsa/202305-11
Remediation
- lists.torproject.org https://lists.torproject.org/pipermail/tor-announce/2022-June/000242.html