CVE-2011-0427

Published: 19 January 2011

Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

Priority

Status

Package	Release	Status
tor Launchpad, Ubuntu, Debian	dapper	Ignored (end of life)
	hardy	Ignored (end of life)
	karmic	Does not exist
	lucid	Does not exist
	maverick	Does not exist
	natty	Not vulnerable (0.2.1.29-1)
	oneiric	Not vulnerable (0.2.1.29-1)
	upstream	Released (0.2.1.29)

References

http://blog.torproject.org/blog/tor-02129-released-security-patches
https://www.cve.org/CVERecord?id=CVE-2011-0427
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.