CVE-2010-1676: Buffer Overflow
Published Dec 22, 2010
·Updated
Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.
Affected Software
145 affected components
Tor (The Onion Router)=0.1.1.1_alpha
Tor (The Onion Router)=0.2.1.1.14
Tor (The Onion Router)=0.2.2.17-alpha
Tor (The Onion Router)=0.1.1.6
Tor (The Onion Router)=0.1.1.9
Tor (The Onion Router)=0.0.6.2
Tor (The Onion Router)=0.2.1.1.12
Tor (The Onion Router)=0.1.2.1_alpha-cvs
Tor (The Onion Router)=0.1.0.18
Tor (The Onion Router)=0.2.2.8-alpha
Tor (The Onion Router)=0.0.2_pre24
Tor (The Onion Router)=0.2.1.1.16
Tor (The Onion Router)=0.0.2_pre16
Tor (The Onion Router)=0.2.2.5-alpha
Tor (The Onion Router)=0.1.1.23
Tor (The Onion Router)=0.0.5
Tor (The Onion Router)=0.1.0.7
Tor (The Onion Router)=0.0.9.8
Tor (The Onion Router)=0.0.9.10
Tor (The Onion Router)=0.1.1.19
Tor (The Onion Router)=0.1.2.18
Tor (The Onion Router)=0.0.9.2
Tor (The Onion Router)=0.1.2.10
Tor (The Onion Router)=0.2.2.11-alpha
Tor (The Onion Router)=0.0.7
Tor (The Onion Router)=0.1.0.10
Tor (The Onion Router)=0.1.2.9
Tor (The Onion Router)=0.0.9
Tor (The Onion Router)=0.1.0.8
Tor (The Onion Router)=0.2.1.1.18
Tor (The Onion Router)=0.2.1.1.17
Tor (The Onion Router)=0.0.9.5
Tor (The Onion Router)=0.1.0.12
Tor (The Onion Router)=0.0.9.3
Tor (The Onion Router)=0.1.2.5
Tor (The Onion Router)=0.1.2.16
Tor (The Onion Router)=0.0.2_pre17
Tor (The Onion Router)=0.1.1.26
Tor (The Onion Router)=0.0.8
Tor (The Onion Router)=0.2.2.1-alpha
Tor (The Onion Router)=0.0.9.9
Tor (The Onion Router)=0.1.1.3_alpha
Tor (The Onion Router)=0.1.1.17
Tor (The Onion Router)=0.1.0.5
Tor (The Onion Router)=0.1.2.14
Tor (The Onion Router)=0.1.0.2
Tor (The Onion Router)=0.1.0.1
Tor (The Onion Router)=0.2.1.1.24
Tor (The Onion Router)=0.2.1.1.25
Tor (The Onion Router)=0.1.1.2
Tor (The Onion Router)=0.0.2_pre19
Tor (The Onion Router)=0.0.2_pre23
Tor (The Onion Router)=0.1.1.8
Tor (The Onion Router)=0.0.2_pre14
Tor (The Onion Router)=0.1.1.5
Tor (The Onion Router)=0.1.0.13
Tor (The Onion Router)=0.1.0.19
Tor (The Onion Router)=0.2.2.6-alpha
Tor (The Onion Router)=0.2.2.14-alpha
Tor (The Onion Router)=0.2.2.12-alpha
Tor (The Onion Router)=0.1.0.3
Tor (The Onion Router)=0.0.7.1
Tor (The Onion Router)=0.0.6
Tor (The Onion Router)=0.1.1.10_alpha
Tor (The Onion Router)=0.0.2_pre26
Tor (The Onion Router)=0.1.0.14
Tor (The Onion Router)=0.1.1.12
Tor (The Onion Router)=0.1.1.16
Tor (The Onion Router)=0.0.3
Tor (The Onion Router)=0.1.1.18
Tor (The Onion Router)=0.0.9.4
Tor (The Onion Router)=0.1.1.15
Tor (The Onion Router)=0.1.1.4_alpha
Tor (The Onion Router)=0.1.1.21
Tor (The Onion Router)=0.0.2_pre22
Tor (The Onion Router)=0.0.2_pre21
Tor (The Onion Router)=0.1.2.4
Tor (The Onion Router)=0.1.2.11
Tor (The Onion Router)=0.2.2.19-alpha
Tor (The Onion Router)=0.1.0.15
Tor (The Onion Router)=0.1.2.19
Tor (The Onion Router)=0.1.2.7-alpha
Tor (The Onion Router)=0.0.6.1
Tor (The Onion Router)=0.2.1.1.19
Tor (The Onion Router)=0.2.1.1.13
Tor (The Onion Router)=0.0.2
Tor (The Onion Router)=0.2.2.3-alpha
Tor (The Onion Router)=0.1.1.14
Tor (The Onion Router)=0.2.2.2-alpha
Tor (The Onion Router)=0.1.0.6
Tor (The Onion Router)=0.2.1.1.22
Tor (The Onion Router)=0.1.1.3
Tor (The Onion Router)=0.2.1.1.21
Tor (The Onion Router)=0.2.2.10-alpha
Tor (The Onion Router)=0.1.1.7_alpha
Tor (The Onion Router)=0.0.2_pre13
Tor (The Onion Router)=0.1.1.6_alpha
Tor (The Onion Router)=0.1.0.9
Tor (The Onion Router)=0.1.1
Tor (The Onion Router)=0.1.1.22
Tor (The Onion Router)=0.1.2.2
Tor (The Onion Router)=0.0.7.3
Tor (The Onion Router)=0.0.7.2
Tor (The Onion Router)=0.1.2.13
Tor (The Onion Router)=0.1.1.2_alpha
Tor (The Onion Router)=0.1.1.1
Tor (The Onion Router)=0.1.0.16
Tor (The Onion Router)=0.2.2.16-alpha
Tor (The Onion Router)=0.0.9.1
Tor (The Onion Router)=0.1.1.10
Tor (The Onion Router)=0.2.2.4-alpha
Tor (The Onion Router)=0.2.2.13-alpha
Tor (The Onion Router)=0.0.2_pre18
Tor (The Onion Router)=0.2.2.7-alpha
Tor (The Onion Router)=0.0.2_pre27
Tor (The Onion Router)=0.0.9.7
Tor (The Onion Router)=0.1.1.20
Tor (The Onion Router)=0.1.0.17
Tor (The Onion Router)=0.1.1.7
Tor (The Onion Router)=0.0.8.1
Tor (The Onion Router)=0.0.4
Tor (The Onion Router)=0.0.2_pre25
Tor (The Onion Router)=0.2.1.1.26
Tor (The Onion Router)=0.2.1.1.23
Tor (The Onion Router)=0.2.1.1.20
Tor (The Onion Router)=0.2.2.18-alpha
Tor (The Onion Router)=0.1.1.25
Tor (The Onion Router)=0.1.0.4
Tor (The Onion Router)=0.0.9.6
Tor (The Onion Router)=0.2.2.9-alpha
Tor (The Onion Router)=0.1.1.13
Tor (The Onion Router)=0.1.1.8_alpha
Tor (The Onion Router)=0.2.1.1.15
Tor (The Onion Router)=0.2.2.15-alpha
Tor (The Onion Router)=0.1.2.30
Tor (The Onion Router)=0.1.1.9_alpha
Tor (The Onion Router)<=0.2.1.1.27
Tor (The Onion Router)=0.1.1.5_alpha
Tor (The Onion Router)=0.1.0.11
Tor (The Onion Router)=0.1.1.11
Tor (The Onion Router)=0.0.2_pre15
Tor (The Onion Router)=0.0.2_pre20
Tor (The Onion Router)=0.1.2.12
Tor (The Onion Router)=0.1.2.5-alpha
Tor (The Onion Router)=0.1.1.4
Remediation
Patch Available
Event History
Dec 22, 2010
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-1676?
CVE-2010-1676 has a high severity as it allows remote attackers to cause a denial of service or possibly execute arbitrary code.
2
How do I fix CVE-2010-1676?
To fix CVE-2010-1676, upgrade to Tor version 0.2.1.28 or 0.2.2.20-alpha or newer versions.
3
What impact does CVE-2010-1676 have on Tor users?
CVE-2010-1676 can lead to a daemon crash, affecting the availability of the Tor service for users.
4
What versions of Tor are affected by CVE-2010-1676?
CVE-2010-1676 affects multiple versions of Tor, specifically versions before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha.
5
Is there a workaround for CVE-2010-1676?
No specific workaround for CVE-2010-1676 has been documented; upgrading to a secure version is recommended.