CVE-2011-0016

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.
Severity
UNKNOWN
AV:L/AC:L/Au:N/C:P/I:N/A:N
Atk. Vector
LOCAL
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
VendorProductVersion
tortor
𝑥
≤ 0.2.1.28
tortor
0.0.2
tortor
0.0.2_pre13
tortor
0.0.2_pre14
tortor
0.0.2_pre15
tortor
0.0.2_pre16
tortor
0.0.2_pre17
tortor
0.0.2_pre18
tortor
0.0.2_pre19
tortor
0.0.2_pre20
tortor
0.0.2_pre21
tortor
0.0.2_pre22
tortor
0.0.2_pre23
tortor
0.0.2_pre24
tortor
0.0.2_pre25
tortor
0.0.2_pre26
tortor
0.0.2_pre27
tortor
0.0.3
tortor
0.0.4
tortor
0.0.5
tortor
0.0.6
tortor
0.0.6.1
tortor
0.0.6.2
tortor
0.0.7
tortor
0.0.7.1
tortor
0.0.7.2
tortor
0.0.7.3
tortor
0.0.8
tortor
0.0.8.1
tortor
0.0.9
tortor
0.0.9.1
tortor
0.0.9.2
tortor
0.0.9.3
tortor
0.0.9.4
tortor
0.0.9.5
tortor
0.0.9.6
tortor
0.0.9.7
tortor
0.0.9.8
tortor
0.0.9.9
tortor
0.0.9.10
tortor
0.1.0.1
tortor
0.1.0.2
tortor
0.1.0.3
tortor
0.1.0.4
tortor
0.1.0.5
tortor
0.1.0.6
tortor
0.1.0.7
tortor
0.1.0.8
tortor
0.1.0.9
tortor
0.1.0.10
tortor
0.1.0.11
tortor
0.1.0.12
tortor
0.1.0.13
tortor
0.1.0.14
tortor
0.1.0.15
tortor
0.1.0.16
tortor
0.1.0.17
tortor
0.1.1
tortor
0.1.1.1
tortor
0.1.1.1
tortor
0.1.1.2
tortor
0.1.1.2
tortor
0.1.1.3
tortor
0.1.1.3
tortor
0.1.1.4
tortor
0.1.1.4
tortor
0.1.1.5
tortor
0.1.1.5
tortor
0.1.1.6
tortor
0.1.1.6
tortor
0.1.1.7
tortor
0.1.1.7
tortor
0.1.1.8
tortor
0.1.1.8
tortor
0.1.1.9
tortor
0.1.1.9
tortor
0.1.1.10
tortor
0.1.1.10
tortor
0.1.1.11
tortor
0.1.1.12
tortor
0.1.1.13
tortor
0.1.1.14
tortor
0.1.1.15
tortor
0.1.1.16
tortor
0.1.1.17
tortor
0.1.1.18
tortor
0.1.1.19
tortor
0.1.1.20
tortor
0.1.1.21
tortor
0.1.1.22
tortor
0.1.1.23
tortor
0.1.1.25
tortor
0.1.1.26
tortor
0.1.2.1
tortor
0.1.2.2
tortor
0.1.2.3
tortor
0.1.2.4
tortor
0.1.2.5
tortor
0.1.2.5
tortor
0.1.2.6
tortor
0.1.2.7
tortor
0.1.2.8
tortor
0.1.2.9
tortor
0.1.2.10
tortor
0.1.2.11
tortor
0.1.2.12
tortor
0.1.2.13
tortor
0.1.2.14
tortor
0.1.2.15
tortor
0.1.2.16
tortor
0.1.2.17
tortor
0.1.2.18
tortor
0.1.2.19
tortor
0.1.2.30
tortor
0.1.2.31
tortor
0.2.0.1
tortor
0.2.0.2
tortor
0.2.0.3
tortor
0.2.0.4
tortor
0.2.0.5
tortor
0.2.0.6
tortor
0.2.0.7
tortor
0.2.0.8
tortor
0.2.0.9
tortor
0.2.0.10
tortor
0.2.0.11
tortor
0.2.0.12
tortor
0.2.0.13
tortor
0.2.0.14
tortor
0.2.0.15
tortor
0.2.0.16
tortor
0.2.0.17
tortor
0.2.0.18
tortor
0.2.0.19
tortor
0.2.0.20
tortor
0.2.0.21
tortor
0.2.0.22
tortor
0.2.0.23
tortor
0.2.0.24
tortor
0.2.0.25
tortor
0.2.0.26
tortor
0.2.0.27
tortor
0.2.0.28
tortor
0.2.0.29
tortor
0.2.0.29
tortor
0.2.0.30
tortor
0.2.0.30
tortor
0.2.0.31
tortor
0.2.0.31
tortor
0.2.0.32
tortor
0.2.0.33
tortor
0.2.0.34
tortor
0.2.0.35
tortor
0.2.1.1
tortor
0.2.1.2
tortor
0.2.1.3
tortor
0.2.1.4
tortor
0.2.1.5
tortor
0.2.1.6
tortor
0.2.1.7
tortor
0.2.1.8
tortor
0.2.1.9
tortor
0.2.1.10
tortor
0.2.1.11
tortor
0.2.1.12
tortor
0.2.1.12
tortor
0.2.1.13
tortor
0.2.1.14
tortor
0.2.1.15
tortor
0.2.1.16
tortor
0.2.1.17
tortor
0.2.1.18
tortor
0.2.1.19
tortor
0.2.1.20
tortor
0.2.1.21
tortor
0.2.1.22
tortor
0.2.1.23
tortor
0.2.1.24
tortor
0.2.1.25
tortor
0.2.1.26
tortor
0.2.1.27
tortor
0.2.2.1
tortor
0.2.2.1
tortor
0.2.2.2
tortor
0.2.2.2
tortor
0.2.2.3
tortor
0.2.2.3
tortor
0.2.2.4
tortor
0.2.2.4
tortor
0.2.2.5
tortor
0.2.2.5
tortor
0.2.2.6
tortor
0.2.2.6
tortor
0.2.2.7
tortor
0.2.2.8
tortor
0.2.2.9
tortor
0.2.2.10
tortor
0.2.2.11
tortor
0.2.2.12
tortor
0.2.2.13
tortor
0.2.2.14
tortor
0.2.2.15
tortor
0.2.2.16
tortor
0.2.2.17
tortor
0.2.2.18
tortor
0.2.2.19
tortor
0.2.2.20
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://archives.seul.org/or/announce/Jan-2011/msg00000.html
http://blog.torproject.org/blog/tor-02129-released-security-patches
http://secunia.com/advisories/42905
http://secunia.com/advisories/42907
http://www.debian.org/security/2011/dsa-2148
http://www.openwall.com/lists/oss-security/2011/01/18/7
http://www.securityfocus.com/bid/45832
http://www.securitytracker.com/id?1024980
http://www.vupen.com/english/advisories/2011/0131
http://www.vupen.com/english/advisories/2011/0132
https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog
https://trac.torproject.org/projects/tor/ticket/2384
https://trac.torproject.org/projects/tor/ticket/2385