Vulnerabilities > CVE-2021-28090 - Reachable Assertion vulnerability in multiple products

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
LOW
network
low complexity
torproject
fedoraproject
CWE-617

Summary

Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an assertion failure, aka TROVE-2021-002.

Vulnerable Configurations

Part Description Count
Application
Torproject
470
OS
Fedoraproject
1

Common Weakness Enumeration (CWE)