PT-2011-2014 · Tor · Tor

Debuger · Published 2011-01-19 · Updated 2011-01-22 · CVE-2011-0016

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.1.29 Tor versions 0.2.2.x prior to 0.2.2.21-alpha

Description The issue is related to the improper management of key data in memory. This could potentially allow local users to obtain sensitive information by reading memory that was previously used by a different process.

Recommendations For Tor versions prior to 0.2.1.29, update to version 0.2.1.29 or later. For Tor versions 0.2.2.x prior to 0.2.2.21-alpha, update to version 0.2.2.21-alpha or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-0016

DSA-2148-1

Affected Products

Tor

References · 17

• http://vupen.com/english/advisories/2011/0131 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0016 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-0016 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0132 · Vendor Advisory
• http://blog.torproject.org/blog/tor-02129-released-security-patches · Vendor Advisory
• http://secunia.com/advisories/42907 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0016 · Vendor Advisory
• http://secunia.com/advisories/42905 · Vendor Advisory
• http://debian.org/security/2011/dsa-2148 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-0016 · Vendor Advisory
• https://trac.torproject.org/projects/tor/ticket/2384 · Note
• http://securityfocus.com/bid/45832 · Note
• http://archives.seul.org/or/announce/Jan-2011/msg00000.html · Note
• https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog · Note
• http://securitytracker.com/id?1024980 · Note