CVE-2011-1924

Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
tortor
𝑥
≤ 0.2.1.29
tortor
0.0.2
tortor
0.0.2_pre13:_pre13
tortor
0.0.2_pre14:_pre14
tortor
0.0.2_pre15:_pre15
tortor
0.0.2_pre16:_pre16
tortor
0.0.2_pre17:_pre17
tortor
0.0.2_pre18:_pre18
tortor
0.0.2_pre19:_pre19
tortor
0.0.2_pre20:_pre20
tortor
0.0.2_pre21:_pre21
tortor
0.0.2_pre22:_pre22
tortor
0.0.2_pre23:_pre23
tortor
0.0.2_pre24:_pre24
tortor
0.0.2_pre25:_pre25
tortor
0.0.2_pre26:_pre26
tortor
0.0.2_pre27:_pre27
tortor
0.0.3
tortor
0.0.4
tortor
0.0.5
tortor
0.0.6
tortor
0.0.6.1
tortor
0.0.6.2
tortor
0.0.7
tortor
0.0.7.1
tortor
0.0.7.2
tortor
0.0.7.3
tortor
0.0.8
tortor
0.0.8.1
tortor
0.0.9
tortor
0.0.9.1
tortor
0.0.9.2
tortor
0.0.9.3
tortor
0.0.9.4
tortor
0.0.9.5
tortor
0.0.9.6
tortor
0.0.9.7
tortor
0.0.9.8
tortor
0.0.9.9
tortor
0.0.9.10
tortor
0.1.0.1
tortor
0.1.0.2
tortor
0.1.0.3
tortor
0.1.0.4
tortor
0.1.0.5
tortor
0.1.0.6
tortor
0.1.0.7
tortor
0.1.0.8
tortor
0.1.0.9
tortor
0.1.0.10
tortor
0.1.0.11
tortor
0.1.0.12
tortor
0.1.0.13
tortor
0.1.0.14
tortor
0.1.0.15
tortor
0.1.0.16
tortor
0.1.0.17
tortor
0.1.0.18
tortor
0.1.0.19
tortor
0.1.1
tortor
0.1.1.1
tortor
0.1.1.1:alpha
tortor
0.1.1.1_alpha:_alpha
tortor
0.1.1.2
tortor
0.1.1.2:alpha
tortor
0.1.1.2_alpha:_alpha
tortor
0.1.1.3
tortor
0.1.1.3:alpha
tortor
0.1.1.3_alpha:_alpha
tortor
0.1.1.4
tortor
0.1.1.4:alpha
tortor
0.1.1.4_alpha:_alpha
tortor
0.1.1.5
tortor
0.1.1.5:alpha
tortor
0.1.1.6
tortor
0.1.1.6:alpha
tortor
0.1.1.6_alpha:_alpha
tortor
0.1.1.7
tortor
0.1.1.7:alpha
tortor
0.1.1.7_alpha:_alpha
tortor
0.1.1.8
tortor
0.1.1.8:alpha
tortor
0.1.1.9
tortor
0.1.1.9:alpha
tortor
0.1.1.10
tortor
0.1.1.10:alpha
tortor
0.1.1.10_alpha:_alpha
tortor
0.1.1.11
tortor
0.1.1.12
tortor
0.1.1.13
tortor
0.1.1.14
tortor
0.1.1.15
tortor
0.1.1.16
tortor
0.1.1.17
tortor
0.1.1.18
tortor
0.1.1.19
tortor
0.1.1.20
tortor
0.1.1.21
tortor
0.1.1.22
tortor
0.1.1.23
tortor
0.1.1.25
tortor
0.1.1.26
tortor
0.1.2.1:alpha
tortor
0.1.2.1:alpha-cvs
tortor
0.1.2.2
tortor
0.1.2.3:alpha
tortor
0.1.2.4
tortor
0.1.2.5
tortor
0.1.2.5:alpha
tortor
0.1.2.6:alpha
tortor
0.1.2.7:alpha
tortor
0.1.2.8:beta
tortor
0.1.2.9
tortor
0.1.2.10
tortor
0.1.2.11
tortor
0.1.2.12
tortor
0.1.2.13
tortor
0.1.2.14
tortor
0.1.2.15
tortor
0.1.2.16
tortor
0.1.2.17
tortor
0.1.2.18
tortor
0.1.2.19
tortor
0.1.2.30
tortor
0.1.2.31
tortor
0.2.0.1:alpha
tortor
0.2.0.2:alpha
tortor
0.2.0.3:alpha
tortor
0.2.0.4:alpha
tortor
0.2.0.5:alpha
tortor
0.2.0.6:alpha
tortor
0.2.0.7:alpha
tortor
0.2.0.8:alpha
tortor
0.2.0.9:alpha
tortor
0.2.0.10:alpha
tortor
0.2.0.11:alpha
tortor
0.2.0.12:alpha
tortor
0.2.0.13:alpha
tortor
0.2.0.14:alpha
tortor
0.2.0.15:alpha
tortor
0.2.0.16:alpha
tortor
0.2.0.17:alpha
tortor
0.2.0.18:alpha
tortor
0.2.0.19:alpha
tortor
0.2.0.20:alpha
tortor
0.2.0.21:alpha
tortor
0.2.0.22:alpha
tortor
0.2.0.23:alpha
tortor
0.2.0.24:alpha
tortor
0.2.0.25:alpha
tortor
0.2.0.26:alpha
tortor
0.2.0.27:alpha
tortor
0.2.0.28:alpha
tortor
0.2.0.29
tortor
0.2.0.29:alpha
tortor
0.2.0.30
tortor
0.2.0.30:alpha
tortor
0.2.0.31
tortor
0.2.0.31:alpha
tortor
0.2.0.32:alpha
tortor
0.2.0.33
tortor
0.2.0.34:alpha
tortor
0.2.0.35
tortor
0.2.1.1:alpha
tortor
0.2.1.1.1:alpha
tortor
0.2.1.1.2:alpha
tortor
0.2.1.1.3:alpha
tortor
0.2.1.1.4:alpha
tortor
0.2.1.1.5:alpha
tortor
0.2.1.1.6:alpha
tortor
0.2.1.1.7:alpha
tortor
0.2.1.1.8:alpha
tortor
0.2.1.1.9:alpha
tortor
0.2.1.1.10:alpha
tortor
0.2.1.1.11:alpha
tortor
0.2.1.1.12
tortor
0.2.1.1.12:alpha
tortor
0.2.1.1.13
tortor
0.2.1.1.14
tortor
0.2.1.1.15
tortor
0.2.1.1.16
tortor
0.2.1.1.17
tortor
0.2.1.1.18
tortor
0.2.1.1.19
tortor
0.2.1.1.20
tortor
0.2.1.1.21
tortor
0.2.1.1.22
tortor
0.2.1.1.23
tortor
0.2.1.1.24
tortor
0.2.1.1.25
tortor
0.2.1.1.26
tortor
0.2.1.1.27
tortor
0.2.1.1.28
tortor
0.2.1.2:alpha
tortor
0.2.1.3:alpha
tortor
0.2.1.4:alpha
tortor
0.2.1.5:alpha
tortor
0.2.1.6:alpha
tortor
0.2.1.7:alpha
tortor
0.2.1.8:alpha
tortor
0.2.1.9:alpha
tortor
0.2.1.10:alpha
tortor
0.2.1.11:alpha
tortor
0.2.1.12
tortor
0.2.1.12:alpha
tortor
0.2.1.13
tortor
0.2.1.14
tortor
0.2.1.15
tortor
0.2.1.16
tortor
0.2.1.17
tortor
0.2.1.18
tortor
0.2.1.19
tortor
0.2.1.20
tortor
0.2.1.21
tortor
0.2.1.22
tortor
0.2.1.23
tortor
0.2.1.24
tortor
0.2.1.25
tortor
0.2.1.26
tortor
0.2.1.27
tortor
0.2.1.28
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tor
bullseye (security)
0.4.5.16-1
fixed
bullseye
0.4.5.16-1
fixed
squeeze
no-dsa
lenny
no-dsa
bookworm
0.4.7.16-1
fixed
bookworm (security)
0.4.7.16-1
fixed
sid
0.4.8.13-2
fixed
trixie
0.4.8.13-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tor
oneiric
not-affected
natty
not-affected
maverick
dne
lucid
dne
hardy
ignored
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061258.html
http://secunia.com/advisories/43548
http://secunia.com/advisories/44862
http://www.securityfocus.com/bid/46618
https://bugzilla.redhat.com/show_bug.cgi?id=705192
https://bugzilla.redhat.com/show_bug.cgi?id=705194
https://gitweb.torproject.org/tor.git/commit/43414eb98821d3b5c6c65181d7545ce938f82c8e
https://lists.torproject.org/pipermail/tor-announce/2011-February/000000.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061258.html
http://secunia.com/advisories/43548
http://secunia.com/advisories/44862
http://www.securityfocus.com/bid/46618
https://bugzilla.redhat.com/show_bug.cgi?id=705192
https://bugzilla.redhat.com/show_bug.cgi?id=705194
https://gitweb.torproject.org/tor.git/commit/43414eb98821d3b5c6c65181d7545ce938f82c8e
https://lists.torproject.org/pipermail/tor-announce/2011-February/000000.html