CVE-2010-1676

Tor < 0.2.1.28 and 0.2.2.x < 0.2.2.20-alpha - Heap-Based Buffer Overflow

Title source: llm

Description

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

References (16)

Core 16

Core References

Patch x_refsource_confirm

http://blog.torproject.org/blog/tor-02128-released-security-patches

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/42667

Patch x_refsource_confirm

http://blog.torproject.org/blog/tor-02220-alpha-out-security-patches

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1024910

Various Sources x_refsource_confirm

https://gitweb.torproject.org/tor.git/blob/release-0.2.1:/ChangeLog

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0114

Patch mailing-list x_refsource_mlist

http://archives.seul.org/or/announce/Dec-2010/msg00000.html

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2010/3290

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-201101-02.xml

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/45500

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/42916

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/42783

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/42536

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052657.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2010/dsa-2136

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052690.html

Scores

EPSS 0.0788

EPSS Percentile 94.0%

Details

CWE

CWE-119

Status published

Products (50)

tor/tor 0.0.2

tor/tor 0.0.2_pre13

tor/tor 0.0.2_pre14

tor/tor 0.0.2_pre15

tor/tor 0.0.2_pre16

tor/tor 0.0.2_pre17

tor/tor 0.0.2_pre18

tor/tor 0.0.2_pre19

tor/tor 0.0.2_pre20

tor/tor 0.0.2_pre21

... and 40 more

Published Dec 22, 2010

Tracked Since Feb 18, 2026