CVE-2011-0016

CVE-2011-0016 affects Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha, where key data in memory is not properly managed, potentially allowing a local attacker to read memory previously used by another process and disclose sensitive information. Connected advisories confirm a memory-manageme...

CVE-2011-0490

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service daemon crash via vectors that trigger certain log messages...

CVE-2011-0493

CVE-2011-0493 affects Tor releases prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha. The vulnerability can cause a denial of service via assertion failure and daemon exit due to malformed router caches and improper handling of integer values. The available sources indicate that security patc...

CVE-2011-0491

The torrealloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote attackers to cause a denial of service daemon crash via unspecified vectors, related to "underflow errors."...

CVE-2011-0490

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service daemon crash via vectors that trigger certain log messages...

CVE-2011-0015

CVE-2011-0015 affects Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha. The issue arises from improper checking of compression in zlib data, allowing a remote attacker to cause a Denial of Service via a large compression factor. Remediation within the connected docs points to upgrading Tor t...

[SECURITY] [DSA 2148-1] Security update for tor

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2148-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 17, 2011 http://www.debian.org/security/faq -...

FreeBSD : tor -- remote code execution and crash (38bdf10e-2293-11e0-bfa4-001676740879)

The Tor Project reports : A remote heap overflow vulnerability that can allow remote code execution. Other fixes address a variety of assert and crash bugs, most of which we think are hard to exploit remotely. All Tor users should upgrade. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-2148-1 : tor - several vulnerabilities

The developers of Tor, an anonymizing overlay network for TCP, found three security issues during a security audit. A heap overflow allowed the execution of arbitrary code CVE-2011-0427 , a denial of service vulnerability was found in the zlib compression handling and some key memory was...

[SECURITY] [DSA 2148-1] Security update for tor

------------------------------------------------------------------------- Debian Security Advisory DSA-2148-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 17, 2011 http://www.debian.org/security/faq -...

GLSA-201101-02 : Tor: Remote heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-201101-02 Tor: Remote heap-based buffer overflow Tor contains a heap-based buffer overflow in the processing of user or attacker supplied data. No additional information is available. Impact : Successful exploitation of this...

DSA-2148-1 tor - several

Bulletin has no description...

Tor: Remote heap-based buffer overflow

Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description Tor contains a heap-based buffer overflow in the processing of user or attacker supplied data. No additional information is available. Impact Successful...

tor -- remote code execution and crash

The Tor Project reports: A remote heap overflow vulnerability that can allow remote code execution. Other fixes address a variety of assert and crash bugs, most of which we think are hard to exploit remotely. All Tor users should upgrade...

Debian DSA-2141-1 : openssl - SSL/TLS insecure renegotiation protocol design flaw

DSA-2141 consists of three individual parts, which can be viewed in the mailing list archive: DSA 2141-1 openssl, DSA 2141-2 nss, DSA 2141-3 apache2, and DSA 2141-4 lighttpd. This page only covers the first part, openssl. - CVE-2009-3555 Marsh Ray, Steve Dispensa, and Martin Rex discovered a flaw...

DSA-2141-1 openssl - protocol design flaw

Bulletin has no description...

DSA-2141-2 nss - protocol design flaw

Bulletin has no description...

Fedora Update for tor FEDORA-2010-19147

Check for the Version of tor OpenVAS Vulnerability Test Fedora Update for tor FEDORA-2010-19147 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for tor FEDORA-2010-19159

Check for the Version of tor OpenVAS Vulnerability Test Fedora Update for tor FEDORA-2010-19159 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for tor FEDORA-2010-19159

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...