CVE

Id
48403  
CVE No.
CVE-2011-0491  
Status
Candidate  
Description
The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors, related to "underflow errors."  
Phase
Assigned (20110118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
525661 48403 CVE-2011-0491 MLIST:[or-announce] 20110117 Tor 0.2.1.29 is released (security patches)  View
525662 48403 CVE-2011-0491 URL:http://archives.seul.org/or/announce/Jan-2011/msg00000.html  View
525663 48403 CVE-2011-0491 CONFIRM:http://blog.torproject.org/blog/tor-02129-released-security-patches  View
525664 48403 CVE-2011-0491 CONFIRM:https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog  View
525665 48403 CVE-2011-0491 CONFIRM:https://trac.torproject.org/projects/tor/ticket/2324  View
525666 48403 CVE-2011-0491 BID:45953  View
525667 48403 CVE-2011-0491 URL:http://www.securityfocus.com/bid/45953  View
525668 48403 CVE-2011-0491 XF:tor-torrealloc-dos(64888)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33898 JVNDB-2011-004140 Appeon などの製品で使用される Sybase EAServer における任意の Web サービスおよび任意のコードをインストールされる脆弱性 Appeon、Replication Server Messaging Edition (RSME) および WorkSpace で使用される Sybase EAServer には、設計上の脆弱性が存在するため、任意の Web サービスおよび任意のコードをインストールされる脆弱性が存在します。 CVE-2011-0496 48403 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004140.html  View