cbcvebase.
CVE-2011-1924
published 2011-06-14

CVE-2011-1924: Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory…

medium5CVSS 3.1
AVNACLAuNCNINAP
Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.

Affected

209 ranges· showing 25
VendorProductVersion rangeFixed in
debiantor< tor 0.2.1.30-1 (bookworm)tor 0.2.1.30-1 (bookworm)
tortor<= 0.2.1.29
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor

CVSS provenance

nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM