← Back

CVE-2011-1924

nvd nist
Published: Jun 14, 2011Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.

Affected (221)

Products: Tor: Tor
Tor
1 product
Tor
Configuration A
221 vulnerable
Vulnerable SoftwareAffected Versions
Tor
Tor
Up to 0.2.1.29
Tor
Version 0.0.2
Tor
Version 0.0.2_pre13
Tor
Version 0.0.2_pre14
Tor
Version 0.0.2_pre15
Tor
Version 0.0.2_pre16
Tor
Version 0.0.2_pre17
Tor
Version 0.0.2_pre18
Tor
Version 0.0.2_pre19
Tor
Version 0.0.2_pre20
Tor
Version 0.0.2_pre21
Tor
Version 0.0.2_pre22
Tor
Version 0.0.2_pre23
Tor
Version 0.0.2_pre24
Tor
Version 0.0.2_pre25
Tor
Version 0.0.2_pre26
Tor
Version 0.0.2_pre27
Tor
Version 0.0.3
Tor
Version 0.0.4
Tor
Version 0.0.5
Tor
Version 0.0.6.1
Tor
Version 0.0.6.2
Tor
Version 0.0.6
Tor
Version 0.0.7.1
Tor
Version 0.0.7.2
Tor
Version 0.0.7.3
Tor
Version 0.0.7
Tor
Version 0.0.8.1
Tor
Version 0.0.8
Tor
Version 0.0.9.10
Tor
Version 0.0.9.1
Tor
Version 0.0.9.2
Tor
Version 0.0.9.3
Tor
Version 0.0.9.4
Tor
Version 0.0.9.5
Tor
Version 0.0.9.6
Tor
Version 0.0.9.7
Tor
Version 0.0.9.8
Tor
Version 0.0.9.9
Tor
Version 0.0.9
Tor
Version 0.1.0.10
Tor
Version 0.1.0.11
Tor
Version 0.1.0.12
Tor
Version 0.1.0.13
Tor
Version 0.1.0.14
Tor
Version 0.1.0.15
Tor
Version 0.1.0.16
Tor
Version 0.1.0.17
Tor
Version 0.1.0.18
Tor
Version 0.1.0.19
Tor
Version 0.1.0.1
Tor
Version 0.1.0.2
Tor
Version 0.1.0.3
Tor
Version 0.1.0.4
Tor
Version 0.1.0.5
Tor
Version 0.1.0.6
Tor
Version 0.1.0.7
Tor
Version 0.1.0.8
Tor
Version 0.1.0.9
Tor
Version 0.1.1.10
Tor
Version 0.1.1.10 alpha
Tor
Version 0.1.1.10_alpha
Tor
Version 0.1.1.11
Tor
Version 0.1.1.12
Tor
Version 0.1.1.13
Tor
Version 0.1.1.14
Tor
Version 0.1.1.15
Tor
Version 0.1.1.16
Tor
Version 0.1.1.17
Tor
Version 0.1.1.18
Tor
Version 0.1.1.19
Tor
Version 0.1.1.1
Tor
Version 0.1.1.1 alpha
Tor
Version 0.1.1.1_alpha
Tor
Version 0.1.1.20
Tor
Version 0.1.1.21
Tor
Version 0.1.1.22
Tor
Version 0.1.1.23
Tor
Version 0.1.1.25
Tor
Version 0.1.1.26
Tor
Version 0.1.1.2
Tor
Version 0.1.1.2 alpha
Tor
Version 0.1.1.2_alpha
Tor
Version 0.1.1.3
Tor
Version 0.1.1.3 alpha
Tor
Version 0.1.1.3_alpha
Tor
Version 0.1.1.4
Tor
Version 0.1.1.4 alpha
Tor
Version 0.1.1.4_alpha
Tor
Version 0.1.1.5
Tor
Version 0.1.1.5 alpha
Tor
Version 0.1.1.6
Tor
Version 0.1.1.6 alpha
Tor
Version 0.1.1.6_alpha
Tor
Version 0.1.1.7
Tor
Version 0.1.1.7 alpha
Tor
Version 0.1.1.7_alpha
Tor
Version 0.1.1.8
Tor
Version 0.1.1.8 alpha
Tor
Version 0.1.1.9
Tor
Version 0.1.1.9 alpha
Tor
Version 0.1.1
Tor
Version 0.1.2.10
Tor
Version 0.1.2.11
Tor
Version 0.1.2.12
Tor
Version 0.1.2.13
Tor
Version 0.1.2.14
Tor
Version 0.1.2.15
Tor
Version 0.1.2.16
Tor
Version 0.1.2.17
Tor
Version 0.1.2.18
Tor
Version 0.1.2.19
Tor
Version 0.1.2.1 alpha-cvs
Tor
Version 0.1.2.1 alpha
Tor
Version 0.1.2.2
Tor
Version 0.1.2.30
Tor
Version 0.1.2.31
Tor
Version 0.1.2.3 alpha
Tor
Version 0.1.2.4
Tor
Version 0.1.2.5
Tor
Version 0.1.2.5 alpha
Tor
Version 0.1.2.6 alpha
Tor
Version 0.1.2.7 alpha
Tor
Version 0.1.2.8 beta
Tor
Version 0.1.2.9
Tor
Version 0.2.0.10 alpha
Tor
Version 0.2.0.11 alpha
Tor
Version 0.2.0.12 alpha
Tor
Version 0.2.0.13 alpha
Tor
Version 0.2.0.14 alpha
Tor
Version 0.2.0.15 alpha
Tor
Version 0.2.0.16 alpha
Tor
Version 0.2.0.17 alpha
Tor
Version 0.2.0.18 alpha
Tor
Version 0.2.0.19 alpha
Tor
Version 0.2.0.1 alpha
Tor
Version 0.2.0.20 alpha
Tor
Version 0.2.0.21 alpha
Tor
Version 0.2.0.22 alpha
Tor
Version 0.2.0.23 alpha
Tor
Version 0.2.0.24 alpha
Tor
Version 0.2.0.25 alpha
Tor
Version 0.2.0.26 alpha
Tor
Version 0.2.0.27 alpha
Tor
Version 0.2.0.28 alpha
Tor
Version 0.2.0.29
Tor
Version 0.2.0.29 alpha
Tor
Version 0.2.0.2 alpha
Tor
Version 0.2.0.30
Tor
Version 0.2.0.30 alpha
Tor
Version 0.2.0.31
Tor
Version 0.2.0.31 alpha
Tor
Version 0.2.0.32 alpha
Tor
Version 0.2.0.33
Tor
Version 0.2.0.34 alpha
Tor
Version 0.2.0.35
Tor
Version 0.2.0.3 alpha
Tor
Version 0.2.0.4 alpha
Tor
Version 0.2.0.5 alpha
Tor
Version 0.2.0.6 alpha
Tor
Version 0.2.0.7 alpha
Tor
Version 0.2.0.8 alpha
Tor
Version 0.2.0.9 alpha
Tor
Version 0.2.1.1.10 alpha
Tor
Version 0.2.1.1.11 alpha
Tor
Version 0.2.1.1.12
Tor
Version 0.2.1.1.12 alpha
Tor
Version 0.2.1.1.13
Tor
Version 0.2.1.1.14
Tor
Version 0.2.1.1.15
Tor
Version 0.2.1.1.16
Tor
Version 0.2.1.1.17
Tor
Version 0.2.1.1.18
Tor
Version 0.2.1.1.19
Tor
Version 0.2.1.1.1 alpha
Tor
Version 0.2.1.1.20
Tor
Version 0.2.1.1.21
Tor
Version 0.2.1.1.22
Tor
Version 0.2.1.1.23
Tor
Version 0.2.1.1.24
Tor
Version 0.2.1.1.25
Tor
Version 0.2.1.1.26
Tor
Version 0.2.1.1.27
Tor
Version 0.2.1.1.28
Tor
Version 0.2.1.1.2 alpha
Tor
Version 0.2.1.1.3 alpha
Tor
Version 0.2.1.1.4 alpha
Tor
Version 0.2.1.1.5 alpha
Tor
Version 0.2.1.1.6 alpha
Tor
Version 0.2.1.1.7 alpha
Tor
Version 0.2.1.1.8 alpha
Tor
Version 0.2.1.1.9 alpha
Tor
Version 0.2.1.10 alpha
Tor
Version 0.2.1.11 alpha
Tor
Version 0.2.1.12
Tor
Version 0.2.1.12 alpha
Tor
Version 0.2.1.13
Tor
Version 0.2.1.14
Tor
Version 0.2.1.15
Tor
Version 0.2.1.16
Tor
Version 0.2.1.17
Tor
Version 0.2.1.18
Tor
Version 0.2.1.19
Tor
Version 0.2.1.1 alpha
Tor
Version 0.2.1.20
Tor
Version 0.2.1.21
Tor
Version 0.2.1.22
Tor
Version 0.2.1.23
Tor
Version 0.2.1.24
Tor
Version 0.2.1.25
Tor
Version 0.2.1.26
Tor
Version 0.2.1.27
Tor
Version 0.2.1.28
Tor
Version 0.2.1.2 alpha
Tor
Version 0.2.1.3 alpha
Tor
Version 0.2.1.4 alpha
Tor
Version 0.2.1.5 alpha
Tor
Version 0.2.1.6 alpha
Tor
Version 0.2.1.7 alpha
Tor
Version 0.2.1.8 alpha
Tor
Version 0.2.1.9 alpha

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (16)

Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.