CVE-2011-0427

EUVD-2011-0453
Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
tortor
𝑥
≤ 0.2.1.28
tortor
0.0.2
tortor
0.0.2_pre13:_pre13
tortor
0.0.2_pre14:_pre14
tortor
0.0.2_pre15:_pre15
tortor
0.0.2_pre16:_pre16
tortor
0.0.2_pre17:_pre17
tortor
0.0.2_pre18:_pre18
tortor
0.0.2_pre19:_pre19
tortor
0.0.2_pre20:_pre20
tortor
0.0.2_pre21:_pre21
tortor
0.0.2_pre22:_pre22
tortor
0.0.2_pre23:_pre23
tortor
0.0.2_pre24:_pre24
tortor
0.0.2_pre25:_pre25
tortor
0.0.2_pre26:_pre26
tortor
0.0.2_pre27:_pre27
tortor
0.0.3
tortor
0.0.4
tortor
0.0.5
tortor
0.0.6
tortor
0.0.6.1
tortor
0.0.6.2
tortor
0.0.7
tortor
0.0.7.1
tortor
0.0.7.2
tortor
0.0.7.3
tortor
0.0.8
tortor
0.0.8.1
tortor
0.0.9
tortor
0.0.9.1
tortor
0.0.9.2
tortor
0.0.9.3
tortor
0.0.9.4
tortor
0.0.9.5
tortor
0.0.9.6
tortor
0.0.9.7
tortor
0.0.9.8
tortor
0.0.9.9
tortor
0.0.9.10
tortor
0.1.0.1
tortor
0.1.0.2
tortor
0.1.0.3
tortor
0.1.0.4
tortor
0.1.0.5
tortor
0.1.0.6
tortor
0.1.0.7
tortor
0.1.0.8
tortor
0.1.0.9
tortor
0.1.0.10
tortor
0.1.0.11
tortor
0.1.0.12
tortor
0.1.0.13
tortor
0.1.0.14
tortor
0.1.0.15
tortor
0.1.0.16
tortor
0.1.0.17
tortor
0.1.1
tortor
0.1.1.1
tortor
0.1.1.1:alpha
tortor
0.1.1.2
tortor
0.1.1.2:alpha
tortor
0.1.1.3
tortor
0.1.1.3:alpha
tortor
0.1.1.4
tortor
0.1.1.4:alpha
tortor
0.1.1.5
tortor
0.1.1.5:alpha
tortor
0.1.1.6
tortor
0.1.1.6:alpha
tortor
0.1.1.7
tortor
0.1.1.7:alpha
tortor
0.1.1.8
tortor
0.1.1.8:alpha
tortor
0.1.1.9
tortor
0.1.1.9:alpha
tortor
0.1.1.10
tortor
0.1.1.10:alpha
tortor
0.1.1.11
tortor
0.1.1.12
tortor
0.1.1.13
tortor
0.1.1.14
tortor
0.1.1.15
tortor
0.1.1.16
tortor
0.1.1.17
tortor
0.1.1.18
tortor
0.1.1.19
tortor
0.1.1.20
tortor
0.1.1.21
tortor
0.1.1.22
tortor
0.1.1.23
tortor
0.1.1.25
tortor
0.1.1.26
tortor
0.1.2.1:alpha-cvs
tortor
0.1.2.2
tortor
0.1.2.3:alpha
tortor
0.1.2.4
tortor
0.1.2.5
tortor
0.1.2.5:alpha
tortor
0.1.2.6:alpha
tortor
0.1.2.7:alpha
tortor
0.1.2.8:beta
tortor
0.1.2.9
tortor
0.1.2.10
tortor
0.1.2.11
tortor
0.1.2.12
tortor
0.1.2.13
tortor
0.1.2.14
tortor
0.1.2.15
tortor
0.1.2.16
tortor
0.1.2.17
tortor
0.1.2.18
tortor
0.1.2.19
tortor
0.1.2.30
tortor
0.1.2.31
tortor
0.2.0.1:alpha
tortor
0.2.0.2:alpha
tortor
0.2.0.3:alpha
tortor
0.2.0.4:alpha
tortor
0.2.0.5:alpha
tortor
0.2.0.6:alpha
tortor
0.2.0.7:alpha
tortor
0.2.0.8:alpha
tortor
0.2.0.9:alpha
tortor
0.2.0.10:alpha
tortor
0.2.0.11:alpha
tortor
0.2.0.12:alpha
tortor
0.2.0.13:alpha
tortor
0.2.0.14:alpha
tortor
0.2.0.15:alpha
tortor
0.2.0.16:alpha
tortor
0.2.0.17:alpha
tortor
0.2.0.18:alpha
tortor
0.2.0.19:alpha
tortor
0.2.0.20:alpha
tortor
0.2.0.21:alpha
tortor
0.2.0.22:alpha
tortor
0.2.0.23:alpha
tortor
0.2.0.24:alpha
tortor
0.2.0.25:alpha
tortor
0.2.0.26:alpha
tortor
0.2.0.27:alpha
tortor
0.2.0.28:alpha
tortor
0.2.0.29
tortor
0.2.0.29:alpha
tortor
0.2.0.30
tortor
0.2.0.30:alpha
tortor
0.2.0.31
tortor
0.2.0.31:alpha
tortor
0.2.0.32:alpha
tortor
0.2.0.33
tortor
0.2.0.34:alpha
tortor
0.2.0.35
tortor
0.2.1.1:alpha
tortor
0.2.1.2:alpha
tortor
0.2.1.3:alpha
tortor
0.2.1.4:alpha
tortor
0.2.1.5:alpha
tortor
0.2.1.6:alpha
tortor
0.2.1.7:alpha
tortor
0.2.1.8:alpha
tortor
0.2.1.9:alpha
tortor
0.2.1.10:alpha
tortor
0.2.1.11:alpha
tortor
0.2.1.12
tortor
0.2.1.12:alpha
tortor
0.2.1.13
tortor
0.2.1.14
tortor
0.2.1.15
tortor
0.2.1.16
tortor
0.2.1.17
tortor
0.2.1.18
tortor
0.2.1.19
tortor
0.2.1.20
tortor
0.2.1.21
tortor
0.2.1.22
tortor
0.2.1.23
tortor
0.2.1.24
tortor
0.2.1.25
tortor
0.2.1.26
tortor
0.2.1.27
tortor
0.2.2.1
tortor
0.2.2.1:alpha
tortor
0.2.2.2
tortor
0.2.2.2:alpha
tortor
0.2.2.3
tortor
0.2.2.3:alpha
tortor
0.2.2.4
tortor
0.2.2.4:alpha
tortor
0.2.2.5
tortor
0.2.2.5:alpha
tortor
0.2.2.6
tortor
0.2.2.6:alpha
tortor
0.2.2.7:alpha
tortor
0.2.2.8:alpha
tortor
0.2.2.9:alpha
tortor
0.2.2.10:alpha
tortor
0.2.2.11:alpha
tortor
0.2.2.12:alpha
tortor
0.2.2.13:alpha
tortor
0.2.2.14:alpha
tortor
0.2.2.15:alpha
tortor
0.2.2.16:alpha
tortor
0.2.2.17:alpha
tortor
0.2.2.18:alpha
tortor
0.2.2.19:alpha
tortor
0.2.2.20:alpha
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tor
bookworm
0.4.7.16-1
fixed
bookworm (security)
0.4.7.16-1
fixed
bullseye
0.4.5.16-1
fixed
bullseye (security)
0.4.5.16-1
fixed
sid
0.4.8.13-2
fixed
trixie
0.4.8.13-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tor
dapper
ignored
hardy
ignored
karmic
dne
lucid
dne
maverick
dne
natty
not-affected
oneiric
not-affected
Common Weakness Enumeration
References
http://archives.seul.org/or/announce/Jan-2011/msg00000.html
http://blog.torproject.org/blog/tor-02129-released-security-patches
http://secunia.com/advisories/42905
http://secunia.com/advisories/42907
http://www.debian.org/security/2011/dsa-2148
http://www.securityfocus.com/bid/45832
http://www.securitytracker.com/id?1024980
http://www.vupen.com/english/advisories/2011/0131
http://www.vupen.com/english/advisories/2011/0132
https://exchange.xforce.ibmcloud.com/vulnerabilities/64748
https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog
http://archives.seul.org/or/announce/Jan-2011/msg00000.html
http://blog.torproject.org/blog/tor-02129-released-security-patches
http://secunia.com/advisories/42905
http://secunia.com/advisories/42907
http://www.debian.org/security/2011/dsa-2148
http://www.securityfocus.com/bid/45832
http://www.securitytracker.com/id?1024980
http://www.vupen.com/english/advisories/2011/0131
http://www.vupen.com/english/advisories/2011/0132
https://exchange.xforce.ibmcloud.com/vulnerabilities/64748
https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog