CVE:CVE-2014-5117
CNNVD:CNNVD-201407-723
Tor（The Onion Router）是第二代洋葱路由（onion routing）的一种实现，主要用于匿名访问互联网。
Tor 0.2.4.23之前版本和0.2.5.6-alpha之前0.2.5版本中存在安全漏洞，该漏洞源于客户端接收到入站RELAY_EARLY单元后程序才会维护电路。远程攻击者可通过使用RELAY和RELAY_EARLY单元作为隐藏服务名传输信息的手段利用该漏洞实施流量确认攻击。
solution:Upgrade torproject tor to a higher version than *:alpha,0.0.2,0.0.2:pre13,0.0.2:pre14,0.0.2:pre15,0.0.2:pre16,0.0.2:pre17,0.0.2:pre18,0.0.2:pre19,0.0.2:pre20,0.0.2:pre21,0.0.2:pre22,0.0.2:pre23,0.0.2:pre24,0.0.2:pre25,0.0.2:pre26,0.0.2:pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8.1,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.1.20,0.1.1.21,0.1.1.22,0.1.1.23,0.1.1.24,0.1.1.25,0.1.1.26,0.1.2.13,0.1.2.14,0.1.2.15,0.1.2.16,0.1.2.17,0.1.2.18,0.1.2.19,0.2.0.30,0.2.0.31,0.2.0.32,0.2.0.33,0.2.0.34,0.2.0.35,0.2.2.18,0.2.2.19,0.2.2.20,0.2.2.21,0.2.2.22,0.2.2.23,0.2.2.24,0.2.2.25,0.2.2.26,0.2.2.27,0.2.2.28,0.2.2.29,0.2.2.30,0.2.2.31,0.2.2.32,0.2.2.33,0.2.2.34,0.2.2.35,0.2.2.36,0.2.2.37,0.2.2.38,0.2.3,0.2.3.13:alpha,0.2.3.14:alpha,0.2.3.15:alpha,0.2.3.16:alpha,0.2.3.17:beta,0.2.3.18:rc,0.2.3.19:rc,0.2.3.20:rc,0.2.3.21:rc,0.2.3.22:rc,0.2.3.23:rc,0.2.3.24:rc,0.2.4.1:alpha,0.2.4.2:alpha,0.2.4.3:alpha,0.2.4.4:alpha,0.2.4.5:alpha,0.2.4.6:alpha,0.2.4.7:alpha,0.2.4.8:alpha,0.2.4.9:alpha,0.2.4.10:alpha,0.2.4.11:alpha,0.2.4.12:alpha,0.2.4.13:alpha,0.2.4.14:alpha,0.2.4.15:rc,0.2.4.16:rc,0.2.4.17:rc,0.2.4.18:rc,0.2.4.19,0.2.4.20,0.2.5.2:alpha,0.2.5.3:alpha,0.2.5.4:alpha,0.2.5.5:alpha,and avoid the version *:alpha,0.0.2,0.0.2:pre13,0.0.2:pre14,0.0.2:pre15,0.0.2:pre16,0.0.2:pre17,0.0.2:pre18,0.0.2:pre19,0.0.2:pre20,0.0.2:pre21,0.0.2:pre22,0.0.2:pre23,0.0.2:pre24,0.0.2:pre25,0.0.2:pre26,0.0.2:pre27,0.0.3,0.0.4,0.0.5,0.0.6,0.0.6.1,0.0.6.2,0.0.7,0.0.7.1,0.0.7.2,0.0.7.3,0.0.8.1,0.0.9.1,0.0.9.2,0.0.9.3,0.0.9.4,0.0.9.5,0.0.9.6,0.0.9.7,0.0.9.8,0.0.9.9,0.0.9.10,0.1.0.10,0.1.0.11,0.1.0.12,0.1.0.13,0.1.0.14,0.1.0.15,0.1.0.16,0.1.0.17,0.1.1.20,0.1.1.21,0.1.1.22,0.1.1.23,0.1.1.24,0.1.1.25,0.1.1.26,0.1.2.13,0.1.2.14,0.1.2.15,0.1.2.16,0.1.2.17,0.1.2.18,0.1.2.19,0.2.0.30,0.2.0.31,0.2.0.32,0.2.0.33,0.2.0.34,0.2.0.35,0.2.2.18,0.2.2.19,0.2.2.20,0.2.2.21,0.2.2.22,0.2.2.23,0.2.2.24,0.2.2.25,0.2.2.26,0.2.2.27,0.2.2.28,0.2.2.29,0.2.2.30,0.2.2.31,0.2.2.32,0.2.2.33,0.2.2.34,0.2.2.35,0.2.2.36,0.2.2.37,0.2.2.38,0.2.3,0.2.3.13:alpha,0.2.3.14:alpha,0.2.3.15:alpha,0.2.3.16:alpha,0.2.3.17:beta,0.2.3.18:rc,0.2.3.19:rc,0.2.3.20:rc,0.2.3.21:rc,0.2.3.22:rc,0.2.3.23:rc,0.2.3.24:rc,0.2.4.1:alpha,0.2.4.2:alpha,0.2.4.3:alpha,0.2.4.4:alpha,0.2.4.5:alpha,0.2.4.6:alpha,0.2.4.7:alpha,0.2.4.8:alpha,0.2.4.9:alpha,0.2.4.10:alpha,0.2.4.11:alpha,0.2.4.12:alpha,0.2.4.13:alpha,0.2.4.14:alpha,0.2.4.15:rc,0.2.4.16:rc,0.2.4.17:rc,0.2.4.18:rc,0.2.4.19,0.2.4.20,0.2.5.2:alpha,0.2.5.3:alpha,0.2.5.4:alpha,0.2.5.5:alpha