cbcvebase.
CVE-2011-2778
published 2011-12-23

CVE-2011-2778: Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute…

high7.6CVSS 3.1
AVNACHAuNCCICAC
Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration.

Affected

211 ranges· showing 25
VendorProductVersion rangeFixed in
debiantor< tor 0.2.2.35-1 (bookworm)tor 0.2.2.35-1 (bookworm)
tortor<= 0.2.2.34
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor

CVSS provenance

nvd7.6HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
osv7.6HIGH