CVE-2011-0427: Buffer Overflow

Q: What is the severity of CVE-2011-0427?

CVE-2011-0427 is classified as a high severity vulnerability due to the potential for remote attackers to cause denial of service or execute arbitrary code.

Q: How do I fix CVE-2011-0427?

The best way to fix CVE-2011-0427 is to update your Tor software to the latest version, specifically to versions 0.2.1.29 or 0.2.2.21-alpha and later.

Q: What types of systems are affected by CVE-2011-0427?

CVE-2011-0427 affects various versions of the Tor software, including 0.1.1.2 and 0.2.2.x versions prior to 0.2.2.21-alpha.

Q: What actions can attackers perform with CVE-2011-0427?

Attackers exploiting CVE-2011-0427 can potentially trigger memory corruption, leading to application crashes or unauthorized code execution.

Q: Is there a workaround for CVE-2011-0427?

While the most effective solution is to update the software, temporarily limiting network access to the affected Tor versions may reduce risk until updating is possible.

Published Jan 19, 2011

Updated

Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

Affected Software

207 affected components

Tor (The Onion Router)=0.2.1.10-alpha

Tor (The Onion Router)=0.2.2.17-alpha

Tor (The Onion Router)=0.1.1.6

Tor (The Onion Router)=0.2.1.26

Tor (The Onion Router)=0.1.1.2-alpha

Tor (The Onion Router)=0.1.1.9

Tor (The Onion Router)=0.0.6.2

Tor (The Onion Router)=0.2.2.8-alpha

Tor (The Onion Router)=0.0.2_pre24

Tor (The Onion Router)=0.1.1.9-alpha

Tor (The Onion Router)=0.2.0.30

Tor (The Onion Router)=0.0.2_pre16

Tor (The Onion Router)=0.2.2.5-alpha

Tor (The Onion Router)=0.1.1.23

Tor (The Onion Router)=0.0.5

Tor (The Onion Router)=0.2.0.11-alpha

Tor (The Onion Router)=0.1.0.7

Tor (The Onion Router)=0.1.1.6-alpha

Tor (The Onion Router)=0.0.9.8

Tor (The Onion Router)=0.0.9.10

Tor (The Onion Router)=0.1.1.19

Tor (The Onion Router)=0.1.2.18

Tor (The Onion Router)=0.0.9.2

Tor (The Onion Router)=0.1.2.10

Tor (The Onion Router)=0.2.0.22-alpha

Tor (The Onion Router)=0.2.2.11-alpha

Tor (The Onion Router)=0.2.1.8-alpha

Tor (The Onion Router)=0.0.7

Tor (The Onion Router)=0.2.2.5

Tor (The Onion Router)=0.2.0.19-alpha

Tor (The Onion Router)=0.1.0.10

Tor (The Onion Router)=0.2.1.25

Tor (The Onion Router)=0.1.2.9

Tor (The Onion Router)=0.2.0.31-alpha

Tor (The Onion Router)=0.2.0.14-alpha

Tor (The Onion Router)=0.0.9

Tor (The Onion Router)=0.1.0.8

Tor (The Onion Router)=0.2.1.13

Tor (The Onion Router)=0.2.0.28-alpha

Tor (The Onion Router)=0.0.9.5

Tor (The Onion Router)=0.1.0.12

Tor (The Onion Router)=0.0.9.3

Tor (The Onion Router)=0.1.2.5

Tor (The Onion Router)=0.2.1.5-alpha

Tor (The Onion Router)=0.2.0.35

Tor (The Onion Router)=0.1.2.16

Tor (The Onion Router)=0.2.1.17

Tor (The Onion Router)=0.0.2_pre17

Tor (The Onion Router)=0.1.1.26

Tor (The Onion Router)=0.2.0.17-alpha

Tor (The Onion Router)=0.0.8

Tor (The Onion Router)=0.2.2.1-alpha

Tor (The Onion Router)=0.0.9.9

Tor (The Onion Router)=0.2.0.25-alpha

Tor (The Onion Router)=0.1.1.17

Tor (The Onion Router)=0.1.0.5

Tor (The Onion Router)=0.1.2.14

Tor (The Onion Router)=0.1.0.2

Tor (The Onion Router)=0.2.1.19

Tor (The Onion Router)=0.1.0.1

Tor (The Onion Router)=0.1.1.1-alpha

Tor (The Onion Router)=0.2.2.2

Tor (The Onion Router)=0.2.0.26-alpha

Tor (The Onion Router)=0.2.0.12-alpha

Tor (The Onion Router)=0.1.1.2

Tor (The Onion Router)=0.2.1.7-alpha

Tor (The Onion Router)=0.2.0.3-alpha

Tor (The Onion Router)=0.0.2_pre19

Tor (The Onion Router)=0.0.2_pre23

Tor (The Onion Router)=0.1.2.6-alpha

Tor (The Onion Router)=0.2.0.7-alpha

Tor (The Onion Router)=0.2.1.9-alpha

Tor (The Onion Router)=0.1.2.15

Tor (The Onion Router)=0.2.0.29

Tor (The Onion Router)=0.2.1.27

Tor (The Onion Router)=0.1.1.8

Tor (The Onion Router)=0.0.2_pre14

Tor (The Onion Router)=0.1.2.1-alpha-cvs

Tor (The Onion Router)=0.2.0.18-alpha

Tor (The Onion Router)=0.1.1.5

Tor (The Onion Router)=0.1.1.7-alpha

Tor (The Onion Router)=0.2.0.4-alpha

Tor (The Onion Router)=0.1.0.13

Tor (The Onion Router)=0.1.1.3-alpha

Tor (The Onion Router)=0.2.2.6-alpha

Tor (The Onion Router)=0.2.2.3

Tor (The Onion Router)=0.2.0.27-alpha

Tor (The Onion Router)=0.2.2.14-alpha

Tor (The Onion Router)=0.2.2.12-alpha

Tor (The Onion Router)=0.2.1.14

Tor (The Onion Router)=0.2.1.23

Tor (The Onion Router)=0.1.0.3

Tor (The Onion Router)=0.0.7.1

Tor (The Onion Router)=0.2.1.3-alpha

Tor (The Onion Router)=0.0.6

Tor (The Onion Router)=0.0.2_pre26

Tor (The Onion Router)=0.1.0.14

Tor (The Onion Router)=0.2.0.32-alpha

Tor (The Onion Router)=0.1.1.12

Tor (The Onion Router)=0.1.1.16

Tor (The Onion Router)=0.2.0.15-alpha

Tor (The Onion Router)=0.2.1.12

Tor (The Onion Router)=0.2.0.9-alpha

Tor (The Onion Router)=0.1.1.10-alpha

Tor (The Onion Router)=0.0.3

Tor (The Onion Router)=0.2.1.6-alpha

Tor (The Onion Router)=0.1.1.18

Tor (The Onion Router)=0.0.9.4

Tor (The Onion Router)=0.1.1.15

Tor (The Onion Router)=0.2.0.2-alpha

Tor (The Onion Router)=0.2.1.4-alpha

Tor (The Onion Router)=0.1.1.21

Tor (The Onion Router)=0.0.2_pre22

Tor (The Onion Router)=0.1.1.4-alpha

Tor (The Onion Router)=0.0.2_pre21

Tor (The Onion Router)=0.1.2.4

Tor (The Onion Router)=0.1.2.11

Tor (The Onion Router)=0.2.0.8-alpha

Tor (The Onion Router)=0.2.2.19-alpha

Tor (The Onion Router)=0.1.0.15

Tor (The Onion Router)=0.1.2.19

Tor (The Onion Router)=0.1.2.7-alpha

Tor (The Onion Router)=0.0.6.1

Tor (The Onion Router)=0.2.1.22

Tor (The Onion Router)=0.0.2

Tor (The Onion Router)=0.2.2.3-alpha

Tor (The Onion Router)=0.1.1.14

Tor (The Onion Router)=0.2.0.24-alpha

Tor (The Onion Router)=0.2.2.2-alpha

Tor (The Onion Router)=0.2.2.6

Tor (The Onion Router)=0.1.2.3-alpha

Tor (The Onion Router)<=0.2.1.28

Tor (The Onion Router)=0.2.1.18

Tor (The Onion Router)=0.1.0.6

Tor (The Onion Router)=0.2.0.33

Tor (The Onion Router)=0.2.0.34-alpha

Tor (The Onion Router)=0.1.1.3

Tor (The Onion Router)=0.2.2.1

Tor (The Onion Router)=0.2.2.10-alpha

Tor (The Onion Router)=0.2.0.21-alpha

Tor (The Onion Router)=0.1.2.31

Tor (The Onion Router)=0.0.2_pre13

Tor (The Onion Router)=0.1.0.9

Tor (The Onion Router)=0.1.1

Tor (The Onion Router)=0.1.1.22

Tor (The Onion Router)=0.1.2.2

Tor (The Onion Router)=0.0.7.3

Tor (The Onion Router)=0.1.2.8-beta

Tor (The Onion Router)=0.0.7.2

Tor (The Onion Router)=0.2.2.20-alpha

Tor (The Onion Router)=0.2.1.20

Tor (The Onion Router)=0.1.2.13

Tor (The Onion Router)=0.1.1.1

Tor (The Onion Router)=0.1.0.16

Tor (The Onion Router)=0.2.0.20-alpha

Tor (The Onion Router)=0.2.2.16-alpha

Tor (The Onion Router)=0.2.1.16

Tor (The Onion Router)=0.2.1.1-alpha

Tor (The Onion Router)=0.2.1.12-alpha

Tor (The Onion Router)=0.0.9.1

Tor (The Onion Router)=0.2.1.15

Tor (The Onion Router)=0.2.1.21

Tor (The Onion Router)=0.1.1.10

Tor (The Onion Router)=0.2.2.4-alpha

Tor (The Onion Router)=0.2.2.13-alpha

Tor (The Onion Router)=0.0.2_pre18

Tor (The Onion Router)=0.2.0.13-alpha

Tor (The Onion Router)=0.2.1.11-alpha

Tor (The Onion Router)=0.2.2.4

Tor (The Onion Router)=0.2.2.7-alpha

Tor (The Onion Router)=0.2.0.31

Tor (The Onion Router)=0.0.2_pre27

Tor (The Onion Router)=0.0.9.7

Tor (The Onion Router)=0.2.0.1-alpha

Tor (The Onion Router)=0.1.1.20

Tor (The Onion Router)=0.2.0.23-alpha

Tor (The Onion Router)=0.1.0.17

Tor (The Onion Router)=0.1.1.7

Tor (The Onion Router)=0.2.0.10-alpha

Tor (The Onion Router)=0.0.8.1

Tor (The Onion Router)=0.0.4

Tor (The Onion Router)=0.2.1.2-alpha

Tor (The Onion Router)=0.0.2_pre25

Tor (The Onion Router)=0.2.2.18-alpha

Tor (The Onion Router)=0.1.1.5-alpha

Tor (The Onion Router)=0.1.1.25

Tor (The Onion Router)=0.1.0.4

Tor (The Onion Router)=0.2.1.24

Tor (The Onion Router)=0.0.9.6

Tor (The Onion Router)=0.2.2.9-alpha

Tor (The Onion Router)=0.1.1.13

Tor (The Onion Router)=0.2.2.15-alpha

Tor (The Onion Router)=0.1.2.30

Tor (The Onion Router)=0.1.0.11

Tor (The Onion Router)=0.1.1.11

Tor (The Onion Router)=0.1.2.17

Tor (The Onion Router)=0.0.2_pre15

Tor (The Onion Router)=0.2.0.29-alpha

Tor (The Onion Router)=0.0.2_pre20

Tor (The Onion Router)=0.1.2.12

Tor (The Onion Router)=0.1.2.5-alpha

Tor (The Onion Router)=0.2.0.30-alpha

Tor (The Onion Router)=0.2.0.6-alpha

Tor (The Onion Router)=0.1.1.8-alpha

Tor (The Onion Router)=0.2.0.16-alpha

Tor (The Onion Router)=0.1.1.4

Tor (The Onion Router)=0.2.0.5-alpha

Remediation

Event History

Jan 19, 2011

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0427?

CVE-2011-0427 is classified as a high severity vulnerability due to the potential for remote attackers to cause denial of service or execute arbitrary code.

How do I fix CVE-2011-0427?

The best way to fix CVE-2011-0427 is to update your Tor software to the latest version, specifically to versions 0.2.1.29 or 0.2.2.21-alpha and later.

What types of systems are affected by CVE-2011-0427?

CVE-2011-0427 affects various versions of the Tor software, including 0.1.1.2 and 0.2.2.x versions prior to 0.2.2.21-alpha.

What actions can attackers perform with CVE-2011-0427?

Attackers exploiting CVE-2011-0427 can potentially trigger memory corruption, leading to application crashes or unauthorized code execution.

Is there a workaround for CVE-2011-0427?

While the most effective solution is to update the software, temporarily limiting network access to the affected Tor versions may reduce risk until updating is possible.

CVE-2011-0427: Buffer Overflow

Affected Software

Remediation

Patch Available

Patch Available

Patch Available

Event History

Frequently Asked Questions

What is the severity of CVE-2011-0427?

How do I fix CVE-2011-0427?

What types of systems are affected by CVE-2011-0427?

What actions can attackers perform with CVE-2011-0427?

Is there a workaround for CVE-2011-0427?

Company

Resources

Contact