← back
CVE-2010-1676

CVE-2010-1676

EPSS 7.9%
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.seul.org/or/announce/Dec-2010/msg00000.htmlhttp://blog.torproject.org/blog/tor-02128-released-security-patcheshttp://blog.torproject.org/blog/tor-02220-alpha-out-security-patcheshttp://lists.fedoraproject.org/pipermail/package-announce/2010-December/052657.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2010-December/052690.htmlhttp://secunia.com/advisories/42536http://secunia.com/advisories/42667http://secunia.com/advisories/42783http://secunia.com/advisories/42916http://security.gentoo.org/glsa/glsa-201101-02.xmlhttp://securitytracker.com/id?1024910https://gitweb.torproject.org/tor.git/blob/release-0.2.1:/ChangeLog