CVE-2011-1924: Buffer Overflow
Published May 16, 2011
·Updated
A vulnerability in Tor was reported [1] that could allow a malicious remote attacker to cause a denial of service. This vulnerability is due to a boundary error within the policysummarize() function in src/or/policies.c which can be exploited to crash a Tor directory authority.
Upstream announced the release of 0.2.1.30 [2] that is noted to correct this flaw.
[1] http://secunia.com/advisories/43548/ [2] https://lists.torproject.org/pipermail/tor-announce/2011-February/000000.html
Other sources
Buffer overflow in the policysummarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.
— MITRE
Affected Software
221 affected components
Tor (The Onion Router)<=0.2.1.29
Tor (The Onion Router)=0.0.2
Tor (The Onion Router)=0.0.2_pre13
Tor (The Onion Router)=0.0.2_pre14
Tor (The Onion Router)=0.0.2_pre15
Tor (The Onion Router)=0.0.2_pre16
Tor (The Onion Router)=0.0.2_pre17
Tor (The Onion Router)=0.0.2_pre18
Tor (The Onion Router)=0.0.2_pre19
Tor (The Onion Router)=0.0.2_pre20
Tor (The Onion Router)=0.0.2_pre21
Tor (The Onion Router)=0.0.2_pre22
Tor (The Onion Router)=0.0.2_pre23
Tor (The Onion Router)=0.0.2_pre24
Tor (The Onion Router)=0.0.2_pre25
Tor (The Onion Router)=0.0.2_pre26
Tor (The Onion Router)=0.0.2_pre27
Tor (The Onion Router)=0.0.3
Tor (The Onion Router)=0.0.4
Tor (The Onion Router)=0.0.5
Tor (The Onion Router)=0.0.6
Tor (The Onion Router)=0.0.6.1
Tor (The Onion Router)=0.0.6.2
Tor (The Onion Router)=0.0.7
Tor (The Onion Router)=0.0.7.1
Tor (The Onion Router)=0.0.7.2
Tor (The Onion Router)=0.0.7.3
Tor (The Onion Router)=0.0.8
Tor (The Onion Router)=0.0.8.1
Tor (The Onion Router)=0.0.9
Tor (The Onion Router)=0.0.9.1
Tor (The Onion Router)=0.0.9.2
Tor (The Onion Router)=0.0.9.3
Tor (The Onion Router)=0.0.9.4
Tor (The Onion Router)=0.0.9.5
Tor (The Onion Router)=0.0.9.6
Tor (The Onion Router)=0.0.9.7
Tor (The Onion Router)=0.0.9.8
Tor (The Onion Router)=0.0.9.9
Tor (The Onion Router)=0.0.9.10
Tor (The Onion Router)=0.1.0.1
Tor (The Onion Router)=0.1.0.2
Tor (The Onion Router)=0.1.0.3
Tor (The Onion Router)=0.1.0.4
Tor (The Onion Router)=0.1.0.5
Tor (The Onion Router)=0.1.0.6
Tor (The Onion Router)=0.1.0.7
Tor (The Onion Router)=0.1.0.8
Tor (The Onion Router)=0.1.0.9
Tor (The Onion Router)=0.1.0.10
Tor (The Onion Router)=0.1.0.11
Tor (The Onion Router)=0.1.0.12
Tor (The Onion Router)=0.1.0.13
Tor (The Onion Router)=0.1.0.14
Tor (The Onion Router)=0.1.0.15
Tor (The Onion Router)=0.1.0.16
Tor (The Onion Router)=0.1.0.17
Tor (The Onion Router)=0.1.0.18
Tor (The Onion Router)=0.1.0.19
Tor (The Onion Router)=0.1.1
Tor (The Onion Router)=0.1.1.1
Tor (The Onion Router)=0.1.1.1-alpha
Tor (The Onion Router)=0.1.1.1_alpha
Tor (The Onion Router)=0.1.1.2
Tor (The Onion Router)=0.1.1.2-alpha
Tor (The Onion Router)=0.1.1.2_alpha
Tor (The Onion Router)=0.1.1.3
Tor (The Onion Router)=0.1.1.3-alpha
Tor (The Onion Router)=0.1.1.3_alpha
Tor (The Onion Router)=0.1.1.4
Tor (The Onion Router)=0.1.1.4-alpha
Tor (The Onion Router)=0.1.1.4_alpha
Tor (The Onion Router)=0.1.1.5
Tor (The Onion Router)=0.1.1.5-alpha
Tor (The Onion Router)=0.1.1.6
Tor (The Onion Router)=0.1.1.6-alpha
Tor (The Onion Router)=0.1.1.6_alpha
Tor (The Onion Router)=0.1.1.7
Tor (The Onion Router)=0.1.1.7-alpha
Tor (The Onion Router)=0.1.1.7_alpha
Tor (The Onion Router)=0.1.1.8
Tor (The Onion Router)=0.1.1.8-alpha
Tor (The Onion Router)=0.1.1.9
Tor (The Onion Router)=0.1.1.9-alpha
Tor (The Onion Router)=0.1.1.10
Tor (The Onion Router)=0.1.1.10-alpha
Tor (The Onion Router)=0.1.1.10_alpha
Tor (The Onion Router)=0.1.1.11
Tor (The Onion Router)=0.1.1.12
Tor (The Onion Router)=0.1.1.13
Tor (The Onion Router)=0.1.1.14
Tor (The Onion Router)=0.1.1.15
Tor (The Onion Router)=0.1.1.16
Tor (The Onion Router)=0.1.1.17
Tor (The Onion Router)=0.1.1.18
Tor (The Onion Router)=0.1.1.19
Tor (The Onion Router)=0.1.1.20
Tor (The Onion Router)=0.1.1.21
Tor (The Onion Router)=0.1.1.22
Tor (The Onion Router)=0.1.1.23
Tor (The Onion Router)=0.1.1.25
Tor (The Onion Router)=0.1.1.26
Tor (The Onion Router)=0.1.2.1-alpha
Tor (The Onion Router)=0.1.2.1-alpha-cvs
Tor (The Onion Router)=0.1.2.2
Tor (The Onion Router)=0.1.2.3-alpha
Tor (The Onion Router)=0.1.2.4
Tor (The Onion Router)=0.1.2.5
Tor (The Onion Router)=0.1.2.5-alpha
Tor (The Onion Router)=0.1.2.6-alpha
Tor (The Onion Router)=0.1.2.7-alpha
Tor (The Onion Router)=0.1.2.8-beta
Tor (The Onion Router)=0.1.2.9
Tor (The Onion Router)=0.1.2.10
Tor (The Onion Router)=0.1.2.11
Tor (The Onion Router)=0.1.2.12
Tor (The Onion Router)=0.1.2.13
Tor (The Onion Router)=0.1.2.14
Tor (The Onion Router)=0.1.2.15
Tor (The Onion Router)=0.1.2.16
Tor (The Onion Router)=0.1.2.17
Tor (The Onion Router)=0.1.2.18
Tor (The Onion Router)=0.1.2.19
Tor (The Onion Router)=0.1.2.30
Tor (The Onion Router)=0.1.2.31
Tor (The Onion Router)=0.2.0.1-alpha
Tor (The Onion Router)=0.2.0.2-alpha
Tor (The Onion Router)=0.2.0.3-alpha
Tor (The Onion Router)=0.2.0.4-alpha
Tor (The Onion Router)=0.2.0.5-alpha
Tor (The Onion Router)=0.2.0.6-alpha
Tor (The Onion Router)=0.2.0.7-alpha
Tor (The Onion Router)=0.2.0.8-alpha
Tor (The Onion Router)=0.2.0.9-alpha
Tor (The Onion Router)=0.2.0.10-alpha
Tor (The Onion Router)=0.2.0.11-alpha
Tor (The Onion Router)=0.2.0.12-alpha
Tor (The Onion Router)=0.2.0.13-alpha
Tor (The Onion Router)=0.2.0.14-alpha
Tor (The Onion Router)=0.2.0.15-alpha
Tor (The Onion Router)=0.2.0.16-alpha
Tor (The Onion Router)=0.2.0.17-alpha
Tor (The Onion Router)=0.2.0.18-alpha
Tor (The Onion Router)=0.2.0.19-alpha
Tor (The Onion Router)=0.2.0.20-alpha
Tor (The Onion Router)=0.2.0.21-alpha
Tor (The Onion Router)=0.2.0.22-alpha
Tor (The Onion Router)=0.2.0.23-alpha
Tor (The Onion Router)=0.2.0.24-alpha
Tor (The Onion Router)=0.2.0.25-alpha
Tor (The Onion Router)=0.2.0.26-alpha
Tor (The Onion Router)=0.2.0.27-alpha
Tor (The Onion Router)=0.2.0.28-alpha
Tor (The Onion Router)=0.2.0.29
Tor (The Onion Router)=0.2.0.29-alpha
Tor (The Onion Router)=0.2.0.30
Tor (The Onion Router)=0.2.0.30-alpha
Tor (The Onion Router)=0.2.0.31
Tor (The Onion Router)=0.2.0.31-alpha
Tor (The Onion Router)=0.2.0.32-alpha
Tor (The Onion Router)=0.2.0.33
Tor (The Onion Router)=0.2.0.34-alpha
Tor (The Onion Router)=0.2.0.35
Tor (The Onion Router)=0.2.1.1-alpha
Tor (The Onion Router)=0.2.1.1.1-alpha
Tor (The Onion Router)=0.2.1.1.2-alpha
Tor (The Onion Router)=0.2.1.1.3-alpha
Tor (The Onion Router)=0.2.1.1.4-alpha
Tor (The Onion Router)=0.2.1.1.5-alpha
Tor (The Onion Router)=0.2.1.1.6-alpha
Tor (The Onion Router)=0.2.1.1.7-alpha
Tor (The Onion Router)=0.2.1.1.8-alpha
Tor (The Onion Router)=0.2.1.1.9-alpha
Tor (The Onion Router)=0.2.1.1.10-alpha
Tor (The Onion Router)=0.2.1.1.11-alpha
Tor (The Onion Router)=0.2.1.1.12
Tor (The Onion Router)=0.2.1.1.12-alpha
Tor (The Onion Router)=0.2.1.1.13
Tor (The Onion Router)=0.2.1.1.14
Tor (The Onion Router)=0.2.1.1.15
Tor (The Onion Router)=0.2.1.1.16
Tor (The Onion Router)=0.2.1.1.17
Tor (The Onion Router)=0.2.1.1.18
Tor (The Onion Router)=0.2.1.1.19
Tor (The Onion Router)=0.2.1.1.20
Tor (The Onion Router)=0.2.1.1.21
Tor (The Onion Router)=0.2.1.1.22
Tor (The Onion Router)=0.2.1.1.23
Tor (The Onion Router)=0.2.1.1.24
Tor (The Onion Router)=0.2.1.1.25
Tor (The Onion Router)=0.2.1.1.26
Tor (The Onion Router)=0.2.1.1.27
Tor (The Onion Router)=0.2.1.1.28
Tor (The Onion Router)=0.2.1.2-alpha
Tor (The Onion Router)=0.2.1.3-alpha
Tor (The Onion Router)=0.2.1.4-alpha
Tor (The Onion Router)=0.2.1.5-alpha
Tor (The Onion Router)=0.2.1.6-alpha
Tor (The Onion Router)=0.2.1.7-alpha
Tor (The Onion Router)=0.2.1.8-alpha
Tor (The Onion Router)=0.2.1.9-alpha
Tor (The Onion Router)=0.2.1.10-alpha
Tor (The Onion Router)=0.2.1.11-alpha
Tor (The Onion Router)=0.2.1.12
Tor (The Onion Router)=0.2.1.12-alpha
Tor (The Onion Router)=0.2.1.13
Tor (The Onion Router)=0.2.1.14
Tor (The Onion Router)=0.2.1.15
Tor (The Onion Router)=0.2.1.16
Tor (The Onion Router)=0.2.1.17
Tor (The Onion Router)=0.2.1.18
Tor (The Onion Router)=0.2.1.19
Tor (The Onion Router)=0.2.1.20
Tor (The Onion Router)=0.2.1.21
Tor (The Onion Router)=0.2.1.22
Tor (The Onion Router)=0.2.1.23
Tor (The Onion Router)=0.2.1.24
Tor (The Onion Router)=0.2.1.25
Tor (The Onion Router)=0.2.1.26
Tor (The Onion Router)=0.2.1.27
Tor (The Onion Router)=0.2.1.28
Remediation
Patch Available
Event History
May 16, 2011
Data Sourced
10:20 PM
DescriptionSeverityAffected Software
Jun 14, 2011
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1924?
CVE-2011-1924 has a severity rating that indicates it could allow a malicious attacker to cause a denial of service.
2
How do I fix CVE-2011-1924?
To mitigate CVE-2011-1924, it is recommended to update to versions of Tor that are higher than 0.2.1.29, as previous versions are affected by this vulnerability.
3
What software versions are affected by CVE-2011-1924?
CVE-2011-1924 affects multiple versions of Tor, specifically versions prior to 0.2.1.30.
4
What type of vulnerability is CVE-2011-1924?
CVE-2011-1924 is classified as a denial of service vulnerability due to a boundary error in the policy_summarize() function.
5
Is there a workaround for CVE-2011-1924?
There is no official workaround for CVE-2011-1924; the best defense is to update to a secured version of Tor.