2898 matches found
CVE-2011-0490
CVE-2011-0490 affects Tor prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha; the issue stems from calls to Libevent within Libevent log handlers, which could allow a remote attacker to cause a denial of service (daemon crash) via log-triggered vectors. Connected documents confirm affected Tor...
CVE-2011-0427
CVE-2011-0427: Heap-based overflow in Tor disclosed in 2011 affects Tor <= 0.2.1.28/0.2.1.29 and Tor 0.2.2.x
CVE-2011-0016
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process...
CVE-2011-0491
The torrealloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote attackers to cause a denial of service daemon crash via unspecified vectors, related to "underflow errors."...
CVE-2011-0016
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process...
CVE-2011-0427
Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified vectors...
CVE-2011-0493
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha might allow remote attackers to cause a denial of service assertion failure and daemon exit via vectors related to malformed router caches and improper handling of integer values...
CVE-2011-0492
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service assertion failure and daemon exit via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file...
CVE-2011-0016
CVE-2011-0016 affects Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha, where key data in memory is not properly managed, potentially allowing a local attacker to read memory previously used by another process and disclose sensitive information. Connected advisories confirm a memory-manageme...
CVE-2011-0490
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service daemon crash via vectors that trigger certain log messages...
CVE-2011-0015
CVE-2011-0015 affects Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha. The issue arises from improper checking of compression in zlib data, allowing a remote attacker to cause a Denial of Service via a large compression factor. Remediation within the connected docs points to upgrading Tor t...
CVE-2011-0491
CVE-2011-0491 affects Tor up to 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha, where tor_realloc does not validate a size value during memory allocation, potentially causing a denial of service (daemon crash) via underflow in memory handling. Impact is limited to service stability; no explicit remot...
CVE-2011-0493
CVE-2011-0493 affects Tor releases prior to 0.2.1.29 and 0.2.2.x prior to 0.2.2.21-alpha. The vulnerability can cause a denial of service via assertion failure and daemon exit due to malformed router caches and improper handling of integer values. The available sources indicate that security patc...
CVE-2011-0491
The torrealloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote attackers to cause a denial of service daemon crash via unspecified vectors, related to "underflow errors."...
CVE-2011-0490
Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service daemon crash via vectors that trigger certain log messages...
[SECURITY] [DSA 2148-1] Security update for tor
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2148-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 17, 2011 http://www.debian.org/security/faq -...
FreeBSD : tor -- remote code execution and crash (38bdf10e-2293-11e0-bfa4-001676740879)
The Tor Project reports : A remote heap overflow vulnerability that can allow remote code execution. Other fixes address a variety of assert and crash bugs, most of which we think are hard to exploit remotely. All Tor users should upgrade. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Debian DSA-2148-1 : tor - several vulnerabilities
The developers of Tor, an anonymizing overlay network for TCP, found three security issues during a security audit. A heap overflow allowed the execution of arbitrary code CVE-2011-0427 , a denial of service vulnerability was found in the zlib compression handling and some key memory was...
[SECURITY] [DSA 2148-1] Security update for tor
------------------------------------------------------------------------- Debian Security Advisory DSA-2148-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 17, 2011 http://www.debian.org/security/faq -...
GLSA-201101-02 : Tor: Remote heap-based buffer overflow
The remote host is affected by the vulnerability described in GLSA-201101-02 Tor: Remote heap-based buffer overflow Tor contains a heap-based buffer overflow in the processing of user or attacker supplied data. No additional information is available. Impact : Successful exploitation of this...