PT-2011-2014 · Tor · Tor

Debuger · Publicado 2011-01-19 · Atualizado 2011-01-22 · CVE-2011-0016

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.1.29 Tor versions 0.2.2.x prior to 0.2.2.21-alpha

Description The issue is related to the improper management of key data in memory. This could potentially allow local users to obtain sensitive information by reading memory that was previously used by a different process.

Recommendations For Tor versions prior to 0.2.1.29, update to version 0.2.1.29 or later. For Tor versions 0.2.2.x prior to 0.2.2.21-alpha, update to version 0.2.2.21-alpha or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-0016

DSA-2148-1

Produtos afetados

Tor

Referências · 17

• https://trac.torproject.org/projects/tor/ticket/2384 · Nota
• http://vupen.com/english/advisories/2011/0131 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0016 · Nota de Segurança
• http://securityfocus.com/bid/45832 · Nota
• https://security-tracker.debian.org/tracker/CVE-2011-0016 · Aviso do Fabricante
• http://archives.seul.org/or/announce/Jan-2011/msg00000.html · Nota
• https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog · Nota
• http://securitytracker.com/id?1024980 · Nota
• http://vupen.com/english/advisories/2011/0132 · Aviso do Fabricante
• http://blog.torproject.org/blog/tor-02129-released-security-patches · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2011/01/18/7 · Nota
• http://secunia.com/advisories/42907 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0016 · Aviso do Fabricante
• http://secunia.com/advisories/42905 · Aviso do Fabricante
• https://trac.torproject.org/projects/tor/ticket/2385 · Nota