CVE-2011-1924

EUVD-2011-1922
Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
tortor
𝑥
≤ 0.2.1.29
tortor
0.0.2
tortor
0.0.2_pre13:_pre13
tortor
0.0.2_pre14:_pre14
tortor
0.0.2_pre15:_pre15
tortor
0.0.2_pre16:_pre16
tortor
0.0.2_pre17:_pre17
tortor
0.0.2_pre18:_pre18
tortor
0.0.2_pre19:_pre19
tortor
0.0.2_pre20:_pre20
tortor
0.0.2_pre21:_pre21
tortor
0.0.2_pre22:_pre22
tortor
0.0.2_pre23:_pre23
tortor
0.0.2_pre24:_pre24
tortor
0.0.2_pre25:_pre25
tortor
0.0.2_pre26:_pre26
tortor
0.0.2_pre27:_pre27
tortor
0.0.3
tortor
0.0.4
tortor
0.0.5
tortor
0.0.6
tortor
0.0.6.1
tortor
0.0.6.2
tortor
0.0.7
tortor
0.0.7.1
tortor
0.0.7.2
tortor
0.0.7.3
tortor
0.0.8
tortor
0.0.8.1
tortor
0.0.9
tortor
0.0.9.1
tortor
0.0.9.2
tortor
0.0.9.3
tortor
0.0.9.4
tortor
0.0.9.5
tortor
0.0.9.6
tortor
0.0.9.7
tortor
0.0.9.8
tortor
0.0.9.9
tortor
0.0.9.10
tortor
0.1.0.1
tortor
0.1.0.2
tortor
0.1.0.3
tortor
0.1.0.4
tortor
0.1.0.5
tortor
0.1.0.6
tortor
0.1.0.7
tortor
0.1.0.8
tortor
0.1.0.9
tortor
0.1.0.10
tortor
0.1.0.11
tortor
0.1.0.12
tortor
0.1.0.13
tortor
0.1.0.14
tortor
0.1.0.15
tortor
0.1.0.16
tortor
0.1.0.17
tortor
0.1.0.18
tortor
0.1.0.19
tortor
0.1.1
tortor
0.1.1.1
tortor
0.1.1.1:alpha
tortor
0.1.1.1_alpha:_alpha
tortor
0.1.1.2
tortor
0.1.1.2:alpha
tortor
0.1.1.2_alpha:_alpha
tortor
0.1.1.3
tortor
0.1.1.3:alpha
tortor
0.1.1.3_alpha:_alpha
tortor
0.1.1.4
tortor
0.1.1.4:alpha
tortor
0.1.1.4_alpha:_alpha
tortor
0.1.1.5
tortor
0.1.1.5:alpha
tortor
0.1.1.6
tortor
0.1.1.6:alpha
tortor
0.1.1.6_alpha:_alpha
tortor
0.1.1.7
tortor
0.1.1.7:alpha
tortor
0.1.1.7_alpha:_alpha
tortor
0.1.1.8
tortor
0.1.1.8:alpha
tortor
0.1.1.9
tortor
0.1.1.9:alpha
tortor
0.1.1.10
tortor
0.1.1.10:alpha
tortor
0.1.1.10_alpha:_alpha
tortor
0.1.1.11
tortor
0.1.1.12
tortor
0.1.1.13
tortor
0.1.1.14
tortor
0.1.1.15
tortor
0.1.1.16
tortor
0.1.1.17
tortor
0.1.1.18
tortor
0.1.1.19
tortor
0.1.1.20
tortor
0.1.1.21
tortor
0.1.1.22
tortor
0.1.1.23
tortor
0.1.1.25
tortor
0.1.1.26
tortor
0.1.2.1:alpha
tortor
0.1.2.1:alpha-cvs
tortor
0.1.2.2
tortor
0.1.2.3:alpha
tortor
0.1.2.4
tortor
0.1.2.5
tortor
0.1.2.5:alpha
tortor
0.1.2.6:alpha
tortor
0.1.2.7:alpha
tortor
0.1.2.8:beta
tortor
0.1.2.9
tortor
0.1.2.10
tortor
0.1.2.11
tortor
0.1.2.12
tortor
0.1.2.13
tortor
0.1.2.14
tortor
0.1.2.15
tortor
0.1.2.16
tortor
0.1.2.17
tortor
0.1.2.18
tortor
0.1.2.19
tortor
0.1.2.30
tortor
0.1.2.31
tortor
0.2.0.1:alpha
tortor
0.2.0.2:alpha
tortor
0.2.0.3:alpha
tortor
0.2.0.4:alpha
tortor
0.2.0.5:alpha
tortor
0.2.0.6:alpha
tortor
0.2.0.7:alpha
tortor
0.2.0.8:alpha
tortor
0.2.0.9:alpha
tortor
0.2.0.10:alpha
tortor
0.2.0.11:alpha
tortor
0.2.0.12:alpha
tortor
0.2.0.13:alpha
tortor
0.2.0.14:alpha
tortor
0.2.0.15:alpha
tortor
0.2.0.16:alpha
tortor
0.2.0.17:alpha
tortor
0.2.0.18:alpha
tortor
0.2.0.19:alpha
tortor
0.2.0.20:alpha
tortor
0.2.0.21:alpha
tortor
0.2.0.22:alpha
tortor
0.2.0.23:alpha
tortor
0.2.0.24:alpha
tortor
0.2.0.25:alpha
tortor
0.2.0.26:alpha
tortor
0.2.0.27:alpha
tortor
0.2.0.28:alpha
tortor
0.2.0.29
tortor
0.2.0.29:alpha
tortor
0.2.0.30
tortor
0.2.0.30:alpha
tortor
0.2.0.31
tortor
0.2.0.31:alpha
tortor
0.2.0.32:alpha
tortor
0.2.0.33
tortor
0.2.0.34:alpha
tortor
0.2.0.35
tortor
0.2.1.1:alpha
tortor
0.2.1.1.1:alpha
tortor
0.2.1.1.2:alpha
tortor
0.2.1.1.3:alpha
tortor
0.2.1.1.4:alpha
tortor
0.2.1.1.5:alpha
tortor
0.2.1.1.6:alpha
tortor
0.2.1.1.7:alpha
tortor
0.2.1.1.8:alpha
tortor
0.2.1.1.9:alpha
tortor
0.2.1.1.10:alpha
tortor
0.2.1.1.11:alpha
tortor
0.2.1.1.12
tortor
0.2.1.1.12:alpha
tortor
0.2.1.1.13
tortor
0.2.1.1.14
tortor
0.2.1.1.15
tortor
0.2.1.1.16
tortor
0.2.1.1.17
tortor
0.2.1.1.18
tortor
0.2.1.1.19
tortor
0.2.1.1.20
tortor
0.2.1.1.21
tortor
0.2.1.1.22
tortor
0.2.1.1.23
tortor
0.2.1.1.24
tortor
0.2.1.1.25
tortor
0.2.1.1.26
tortor
0.2.1.1.27
tortor
0.2.1.1.28
tortor
0.2.1.2:alpha
tortor
0.2.1.3:alpha
tortor
0.2.1.4:alpha
tortor
0.2.1.5:alpha
tortor
0.2.1.6:alpha
tortor
0.2.1.7:alpha
tortor
0.2.1.8:alpha
tortor
0.2.1.9:alpha
tortor
0.2.1.10:alpha
tortor
0.2.1.11:alpha
tortor
0.2.1.12
tortor
0.2.1.12:alpha
tortor
0.2.1.13
tortor
0.2.1.14
tortor
0.2.1.15
tortor
0.2.1.16
tortor
0.2.1.17
tortor
0.2.1.18
tortor
0.2.1.19
tortor
0.2.1.20
tortor
0.2.1.21
tortor
0.2.1.22
tortor
0.2.1.23
tortor
0.2.1.24
tortor
0.2.1.25
tortor
0.2.1.26
tortor
0.2.1.27
tortor
0.2.1.28
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tor
bookworm
0.4.7.16-1
fixed
bookworm (security)
0.4.7.16-1
fixed
bullseye
0.4.5.16-1
fixed
bullseye (security)
0.4.5.16-1
fixed
lenny
no-dsa
sid
0.4.8.13-2
fixed
squeeze
no-dsa
trixie
0.4.8.13-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tor
hardy
ignored
lucid
dne
maverick
dne
natty
not-affected
oneiric
not-affected
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061258.html
http://secunia.com/advisories/43548
http://secunia.com/advisories/44862
http://www.securityfocus.com/bid/46618
https://bugzilla.redhat.com/show_bug.cgi?id=705192
https://bugzilla.redhat.com/show_bug.cgi?id=705194
https://gitweb.torproject.org/tor.git/commit/43414eb98821d3b5c6c65181d7545ce938f82c8e
https://lists.torproject.org/pipermail/tor-announce/2011-February/000000.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061258.html
http://secunia.com/advisories/43548
http://secunia.com/advisories/44862
http://www.securityfocus.com/bid/46618
https://bugzilla.redhat.com/show_bug.cgi?id=705192
https://bugzilla.redhat.com/show_bug.cgi?id=705194
https://gitweb.torproject.org/tor.git/commit/43414eb98821d3b5c6c65181d7545ce938f82c8e
https://lists.torproject.org/pipermail/tor-announce/2011-February/000000.html