CVEvulnerability
CVE-2010-1676
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Affected configurations
• tor tor (<= 0.2.1.1.27)
• tor tor 0.0.2
• tor tor 0.0.2 pre13
• tor tor 0.0.2 pre14
• tor tor 0.0.2 pre15
• tor tor 0.0.2 pre16
• tor tor 0.0.2 pre17
• tor tor 0.0.2 pre18
• tor tor 0.0.2 pre19
• tor tor 0.0.2 pre20
• tor tor 0.0.2 pre21
• tor tor 0.0.2 pre22
• tor tor 0.0.2 pre23
• tor tor 0.0.2 pre24
• tor tor 0.0.2 pre25
• tor tor 0.0.2 pre26
• tor tor 0.0.2 pre27
• tor tor 0.0.3
• tor tor 0.0.4
• tor tor 0.0.5
• tor tor 0.0.6
• tor tor 0.0.6.1
• tor tor 0.0.6.2
• tor tor 0.0.7
• tor tor 0.0.7.1
• tor tor 0.0.7.2
• tor tor 0.0.7.3
• tor tor 0.0.8
• tor tor 0.0.8.1
• tor tor 0.0.9
• tor tor 0.0.9.1
• tor tor 0.0.9.2
• tor tor 0.0.9.3
• tor tor 0.0.9.4
• tor tor 0.0.9.5
• tor tor 0.0.9.6
• tor tor 0.0.9.7
• tor tor 0.0.9.8
• tor tor 0.0.9.9
• tor tor 0.0.9.10
• tor tor 0.1.0.1
• tor tor 0.1.0.2
• tor tor 0.1.0.3
• tor tor 0.1.0.4
• tor tor 0.1.0.5
• tor tor 0.1.0.6
• tor tor 0.1.0.7
• tor tor 0.1.0.8
• tor tor 0.1.0.9
• tor tor 0.1.0.10
• tor tor 0.1.0.11
• tor tor 0.1.0.12
• tor tor 0.1.0.13
• tor tor 0.1.0.14
• tor tor 0.1.0.15
• tor tor 0.1.0.16
• tor tor 0.1.0.17
• tor tor 0.1.0.18
• tor tor 0.1.0.19
• tor tor 0.1.1
… and 84 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://archives.seul.org/or/announce/Dec-2010/msg00000.html Patch
- http://blog.torproject.org/blog/tor-02128-released-security-patches Patch
- http://blog.torproject.org/blog/tor-02220-alpha-out-security-patches Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052657.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052690.html lists.fedoraproject.org
- http://secunia.com/advisories/42536 Vendor Advisory
- http://secunia.com/advisories/42667 secunia.com
- http://secunia.com/advisories/42783 secunia.com
- http://secunia.com/advisories/42916 secunia.com
- http://security.gentoo.org/glsa/glsa-201101-02.xml security.gentoo.org
- http://securitytracker.com/id?1024910 securitytracker.com
- http://www.debian.org/security/2010/dsa-2136 www.debian.org
- http://www.securityfocus.com/bid/45500 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/3290 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0114 www.vupen.com
- https://gitweb.torproject.org/tor.git/blob/release-0.2.1:/ChangeLog gitweb.torproject.org
- http://archives.seul.org/or/announce/Dec-2010/msg00000.html Patch
- http://blog.torproject.org/blog/tor-02128-released-security-patches Patch
- http://blog.torproject.org/blog/tor-02220-alpha-out-security-patches Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052657.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052690.html lists.fedoraproject.org
- http://secunia.com/advisories/42536 Vendor Advisory
- http://secunia.com/advisories/42667 secunia.com
- http://secunia.com/advisories/42783 secunia.com
- http://secunia.com/advisories/42916 secunia.com
- http://security.gentoo.org/glsa/glsa-201101-02.xml security.gentoo.org
- http://securitytracker.com/id?1024910 securitytracker.com
- http://www.debian.org/security/2010/dsa-2136 www.debian.org
- http://www.securityfocus.com/bid/45500 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/3290 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0114 www.vupen.com
- https://gitweb.torproject.org/tor.git/blob/release-0.2.1:/ChangeLog gitweb.torproject.org