CVE-2011-0015: Input Validation

Q: What is the severity of CVE-2011-0015?

CVE-2011-0015 has been rated as a high severity vulnerability due to its potential to cause denial of service attacks.

Q: How do I fix CVE-2011-0015?

To mitigate CVE-2011-0015, users should upgrade to Tor version 0.2.1.29 or later, or 0.2.2.21-alpha or later.

Q: What types of attacks are possible with CVE-2011-0015?

CVE-2011-0015 allows remote attackers to exploit the vulnerability to cause denial of service through large compression factors in zlib-compressed data.

Q: Which versions of Tor are affected by CVE-2011-0015?

CVE-2011-0015 affects all versions of Tor prior to 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha.

Q: Can CVE-2011-0015 affect my system's performance?

Yes, if exploited, CVE-2011-0015 can lead to denial of service, significantly affecting your system's performance and availability.

Published Jan 19, 2011

Updated

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor.

Affected Software

207 affected components

Tor (The Onion Router)<=0.2.1.28

Tor (The Onion Router)=0.0.2

Tor (The Onion Router)=0.0.2_pre13

Tor (The Onion Router)=0.0.2_pre14

Tor (The Onion Router)=0.0.2_pre15

Tor (The Onion Router)=0.0.2_pre16

Tor (The Onion Router)=0.0.2_pre17

Tor (The Onion Router)=0.0.2_pre18

Tor (The Onion Router)=0.0.2_pre19

Tor (The Onion Router)=0.0.2_pre20

Tor (The Onion Router)=0.0.2_pre21

Tor (The Onion Router)=0.0.2_pre22

Tor (The Onion Router)=0.0.2_pre23

Tor (The Onion Router)=0.0.2_pre24

Tor (The Onion Router)=0.0.2_pre25

Tor (The Onion Router)=0.0.2_pre26

Tor (The Onion Router)=0.0.2_pre27

Tor (The Onion Router)=0.0.3

Tor (The Onion Router)=0.0.4

Tor (The Onion Router)=0.0.5

Tor (The Onion Router)=0.0.6

Tor (The Onion Router)=0.0.6.1

Tor (The Onion Router)=0.0.6.2

Tor (The Onion Router)=0.0.7

Tor (The Onion Router)=0.0.7.1

Tor (The Onion Router)=0.0.7.2

Tor (The Onion Router)=0.0.7.3

Tor (The Onion Router)=0.0.8

Tor (The Onion Router)=0.0.8.1

Tor (The Onion Router)=0.0.9

Tor (The Onion Router)=0.0.9.1

Tor (The Onion Router)=0.0.9.2

Tor (The Onion Router)=0.0.9.3

Tor (The Onion Router)=0.0.9.4

Tor (The Onion Router)=0.0.9.5

Tor (The Onion Router)=0.0.9.6

Tor (The Onion Router)=0.0.9.7

Tor (The Onion Router)=0.0.9.8

Tor (The Onion Router)=0.0.9.9

Tor (The Onion Router)=0.0.9.10

Tor (The Onion Router)=0.1.0.1

Tor (The Onion Router)=0.1.0.2

Tor (The Onion Router)=0.1.0.3

Tor (The Onion Router)=0.1.0.4

Tor (The Onion Router)=0.1.0.5

Tor (The Onion Router)=0.1.0.6

Tor (The Onion Router)=0.1.0.7

Tor (The Onion Router)=0.1.0.8

Tor (The Onion Router)=0.1.0.9

Tor (The Onion Router)=0.1.0.10

Tor (The Onion Router)=0.1.0.11

Tor (The Onion Router)=0.1.0.12

Tor (The Onion Router)=0.1.0.13

Tor (The Onion Router)=0.1.0.14

Tor (The Onion Router)=0.1.0.15

Tor (The Onion Router)=0.1.0.16

Tor (The Onion Router)=0.1.0.17

Tor (The Onion Router)=0.1.1

Tor (The Onion Router)=0.1.1.1

Tor (The Onion Router)=0.1.1.1-alpha

Tor (The Onion Router)=0.1.1.2

Tor (The Onion Router)=0.1.1.2-alpha

Tor (The Onion Router)=0.1.1.3

Tor (The Onion Router)=0.1.1.3-alpha

Tor (The Onion Router)=0.1.1.4

Tor (The Onion Router)=0.1.1.4-alpha

Tor (The Onion Router)=0.1.1.5

Tor (The Onion Router)=0.1.1.5-alpha

Tor (The Onion Router)=0.1.1.6

Tor (The Onion Router)=0.1.1.6-alpha

Tor (The Onion Router)=0.1.1.7

Tor (The Onion Router)=0.1.1.7-alpha

Tor (The Onion Router)=0.1.1.8

Tor (The Onion Router)=0.1.1.8-alpha

Tor (The Onion Router)=0.1.1.9

Tor (The Onion Router)=0.1.1.9-alpha

Tor (The Onion Router)=0.1.1.10

Tor (The Onion Router)=0.1.1.10-alpha

Tor (The Onion Router)=0.1.1.11

Tor (The Onion Router)=0.1.1.12

Tor (The Onion Router)=0.1.1.13

Tor (The Onion Router)=0.1.1.14

Tor (The Onion Router)=0.1.1.15

Tor (The Onion Router)=0.1.1.16

Tor (The Onion Router)=0.1.1.17

Tor (The Onion Router)=0.1.1.18

Tor (The Onion Router)=0.1.1.19

Tor (The Onion Router)=0.1.1.20

Tor (The Onion Router)=0.1.1.21

Tor (The Onion Router)=0.1.1.22

Tor (The Onion Router)=0.1.1.23

Tor (The Onion Router)=0.1.1.25

Tor (The Onion Router)=0.1.1.26

Tor (The Onion Router)=0.1.2.1-alpha-cvs

Tor (The Onion Router)=0.1.2.2

Tor (The Onion Router)=0.1.2.3-alpha

Tor (The Onion Router)=0.1.2.4

Tor (The Onion Router)=0.1.2.5

Tor (The Onion Router)=0.1.2.5-alpha

Tor (The Onion Router)=0.1.2.6-alpha

Tor (The Onion Router)=0.1.2.7-alpha

Tor (The Onion Router)=0.1.2.8-beta

Tor (The Onion Router)=0.1.2.9

Tor (The Onion Router)=0.1.2.10

Tor (The Onion Router)=0.1.2.11

Tor (The Onion Router)=0.1.2.12

Tor (The Onion Router)=0.1.2.13

Tor (The Onion Router)=0.1.2.14

Tor (The Onion Router)=0.1.2.15

Tor (The Onion Router)=0.1.2.16

Tor (The Onion Router)=0.1.2.17

Tor (The Onion Router)=0.1.2.18

Tor (The Onion Router)=0.1.2.19

Tor (The Onion Router)=0.1.2.30

Tor (The Onion Router)=0.1.2.31

Tor (The Onion Router)=0.2.0.1-alpha

Tor (The Onion Router)=0.2.0.2-alpha

Tor (The Onion Router)=0.2.0.3-alpha

Tor (The Onion Router)=0.2.0.4-alpha

Tor (The Onion Router)=0.2.0.5-alpha

Tor (The Onion Router)=0.2.0.6-alpha

Tor (The Onion Router)=0.2.0.7-alpha

Tor (The Onion Router)=0.2.0.8-alpha

Tor (The Onion Router)=0.2.0.9-alpha

Tor (The Onion Router)=0.2.0.10-alpha

Tor (The Onion Router)=0.2.0.11-alpha

Tor (The Onion Router)=0.2.0.12-alpha

Tor (The Onion Router)=0.2.0.13-alpha

Tor (The Onion Router)=0.2.0.14-alpha

Tor (The Onion Router)=0.2.0.15-alpha

Tor (The Onion Router)=0.2.0.16-alpha

Tor (The Onion Router)=0.2.0.17-alpha

Tor (The Onion Router)=0.2.0.18-alpha

Tor (The Onion Router)=0.2.0.19-alpha

Tor (The Onion Router)=0.2.0.20-alpha

Tor (The Onion Router)=0.2.0.21-alpha

Tor (The Onion Router)=0.2.0.22-alpha

Tor (The Onion Router)=0.2.0.23-alpha

Tor (The Onion Router)=0.2.0.24-alpha

Tor (The Onion Router)=0.2.0.25-alpha

Tor (The Onion Router)=0.2.0.26-alpha

Tor (The Onion Router)=0.2.0.27-alpha

Tor (The Onion Router)=0.2.0.28-alpha

Tor (The Onion Router)=0.2.0.29

Tor (The Onion Router)=0.2.0.29-alpha

Tor (The Onion Router)=0.2.0.30

Tor (The Onion Router)=0.2.0.30-alpha

Tor (The Onion Router)=0.2.0.31

Tor (The Onion Router)=0.2.0.31-alpha

Tor (The Onion Router)=0.2.0.32-alpha

Tor (The Onion Router)=0.2.0.33

Tor (The Onion Router)=0.2.0.34-alpha

Tor (The Onion Router)=0.2.0.35

Tor (The Onion Router)=0.2.1.1-alpha

Tor (The Onion Router)=0.2.1.2-alpha

Tor (The Onion Router)=0.2.1.3-alpha

Tor (The Onion Router)=0.2.1.4-alpha

Tor (The Onion Router)=0.2.1.5-alpha

Tor (The Onion Router)=0.2.1.6-alpha

Tor (The Onion Router)=0.2.1.7-alpha

Tor (The Onion Router)=0.2.1.8-alpha

Tor (The Onion Router)=0.2.1.9-alpha

Tor (The Onion Router)=0.2.1.10-alpha

Tor (The Onion Router)=0.2.1.11-alpha

Tor (The Onion Router)=0.2.1.12

Tor (The Onion Router)=0.2.1.12-alpha

Tor (The Onion Router)=0.2.1.13

Tor (The Onion Router)=0.2.1.14

Tor (The Onion Router)=0.2.1.15

Tor (The Onion Router)=0.2.1.16

Tor (The Onion Router)=0.2.1.17

Tor (The Onion Router)=0.2.1.18

Tor (The Onion Router)=0.2.1.19

Tor (The Onion Router)=0.2.1.20

Tor (The Onion Router)=0.2.1.21

Tor (The Onion Router)=0.2.1.22

Tor (The Onion Router)=0.2.1.23

Tor (The Onion Router)=0.2.1.24

Tor (The Onion Router)=0.2.1.25

Tor (The Onion Router)=0.2.1.26

Tor (The Onion Router)=0.2.1.27

Tor (The Onion Router)=0.2.2.1

Tor (The Onion Router)=0.2.2.1-alpha

Tor (The Onion Router)=0.2.2.2

Tor (The Onion Router)=0.2.2.2-alpha

Tor (The Onion Router)=0.2.2.3

Tor (The Onion Router)=0.2.2.3-alpha

Tor (The Onion Router)=0.2.2.4

Tor (The Onion Router)=0.2.2.4-alpha

Tor (The Onion Router)=0.2.2.5

Tor (The Onion Router)=0.2.2.5-alpha

Tor (The Onion Router)=0.2.2.6

Tor (The Onion Router)=0.2.2.6-alpha

Tor (The Onion Router)=0.2.2.7-alpha

Tor (The Onion Router)=0.2.2.8-alpha

Tor (The Onion Router)=0.2.2.9-alpha

Tor (The Onion Router)=0.2.2.10-alpha

Tor (The Onion Router)=0.2.2.11-alpha

Tor (The Onion Router)=0.2.2.12-alpha

Tor (The Onion Router)=0.2.2.13-alpha

Tor (The Onion Router)=0.2.2.14-alpha

Tor (The Onion Router)=0.2.2.15-alpha

Tor (The Onion Router)=0.2.2.16-alpha

Tor (The Onion Router)=0.2.2.17-alpha

Tor (The Onion Router)=0.2.2.18-alpha

Tor (The Onion Router)=0.2.2.19-alpha

Tor (The Onion Router)=0.2.2.20-alpha

Remediation

Event History

Jan 19, 2011

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0015?

CVE-2011-0015 has been rated as a high severity vulnerability due to its potential to cause denial of service attacks.

How do I fix CVE-2011-0015?

To mitigate CVE-2011-0015, users should upgrade to Tor version 0.2.1.29 or later, or 0.2.2.21-alpha or later.

What types of attacks are possible with CVE-2011-0015?

CVE-2011-0015 allows remote attackers to exploit the vulnerability to cause denial of service through large compression factors in zlib-compressed data.

Which versions of Tor are affected by CVE-2011-0015?

CVE-2011-0015 affects all versions of Tor prior to 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha.

Can CVE-2011-0015 affect my system's performance?

Yes, if exploited, CVE-2011-0015 can lead to denial of service, significantly affecting your system's performance and availability.

CVE-2011-0015: Input Validation

Affected Software

Remediation

Patch Available

Patch Available

Patch Available

Event History

Frequently Asked Questions

What is the severity of CVE-2011-0015?

How do I fix CVE-2011-0015?

What types of attacks are possible with CVE-2011-0015?

Which versions of Tor are affected by CVE-2011-0015?

Can CVE-2011-0015 affect my system's performance?

Company

Resources

Contact