CVE-2017-8822

CVE-2017-8822 describes a vulnerability in Tor, affecting versions prior to 0.2.5.16, 0.2.8.17, 0.2.9.14, 0.3.0.13, and 0.3.1.9, where relays with incomplete descriptor downloads could select themselves in a circuit path. This issue, also known as TROVE-2017-012, primarily impacts user anonymity. The vulnerability has a low CVSS score of 3.7, indicating a network-based attack with high complexity and no user interaction required. The potential impact is limited to a degradation of anonymity (low confidentiality), with no integrity or availability concerns. There is no evidence of active exploitation, nor are there any public exploit modules available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public attention.