CVE-2012-3519

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.2.38

Description The issue allows remote attackers to potentially obtain sensitive information about relay selection via a timing side-channel attack. This is due to the different amount of time used for relay-list iteration depending on which relay is chosen.

Recommendations For versions prior to 0.2.2.38, update to version 0.2.2.38 or later to resolve the issue.