CVE-2011-0491
N/A
Published: January 19, 2011 at 11:00 AM UTC
Updated: June 16, 2026 at 11:27 PM UTC
1 product affected across 1 vendorTor
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors, related to "underflow errors."
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 0.2.1.280.0.20.0.2_pre130.0.2_pre140.0.2_pre150.0.2_pre160.0.2_pre170.0.2_pre180.0.2_pre190.0.2_pre200.0.2_pre210.0.2_pre220.0.2_pre230.0.2_pre240.0.2_pre250.0.2_pre260.0.2_pre270.0.30.0.40.0.50.0.60.0.6.10.0.6.20.0.70.0.7.10.0.7.20.0.7.30.0.80.0.8.10.0.90.0.9.10.0.9.100.0.9.20.0.9.30.0.9.40.0.9.50.0.9.60.0.9.70.0.9.80.0.9.90.1.0.10.1.0.100.1.0.110.1.0.120.1.0.130.1.0.140.1.0.150.1.0.160.1.0.170.1.0.20.1.0.30.1.0.40.1.0.50.1.0.60.1.0.70.1.0.80.1.0.90.1.10.1.1.10.1.1.1 alpha0.1.1.100.1.1.10 alpha0.1.1.110.1.1.120.1.1.130.1.1.140.1.1.150.1.1.160.1.1.170.1.1.180.1.1.190.1.1.20.1.1.2 alpha0.1.1.200.1.1.210.1.1.220.1.1.230.1.1.250.1.1.260.1.1.30.1.1.3 alpha0.1.1.40.1.1.4 alpha0.1.1.50.1.1.5 alpha0.1.1.60.1.1.6 alpha0.1.1.70.1.1.7 alpha0.1.1.80.1.1.8 alpha0.1.1.90.1.1.9 alpha0.1.2.1 alpha-cvs0.1.2.100.1.2.110.1.2.120.1.2.130.1.2.140.1.2.150.1.2.160.1.2.170.1.2.180.1.2.190.1.2.20.1.2.3 alpha0.1.2.300.1.2.310.1.2.40.1.2.50.1.2.5 alpha0.1.2.6 alpha0.1.2.7 alpha0.1.2.8 beta0.1.2.90.2.0.1 alpha0.2.0.10 alpha0.2.0.11 alpha0.2.0.12 alpha0.2.0.13 alpha0.2.0.14 alpha0.2.0.15 alpha0.2.0.16 alpha0.2.0.17 alpha0.2.0.18 alpha0.2.0.19 alpha0.2.0.2 alpha0.2.0.20 alpha0.2.0.21 alpha0.2.0.22 alpha0.2.0.23 alpha0.2.0.24 alpha0.2.0.25 alpha0.2.0.26 alpha0.2.0.27 alpha0.2.0.28 alpha0.2.0.290.2.0.29 alpha0.2.0.3 alpha0.2.0.300.2.0.30 alpha0.2.0.310.2.0.31 alpha0.2.0.32 alpha0.2.0.330.2.0.34 alpha0.2.0.350.2.0.4 alpha0.2.0.5 alpha0.2.0.6 alpha0.2.0.7 alpha0.2.0.8 alpha0.2.0.9 alpha0.2.1.1 alpha0.2.1.10 alpha0.2.1.11 alpha0.2.1.120.2.1.12 alpha0.2.1.130.2.1.140.2.1.150.2.1.160.2.1.170.2.1.180.2.1.190.2.1.2 alpha0.2.1.200.2.1.210.2.1.220.2.1.230.2.1.240.2.1.250.2.1.260.2.1.270.2.1.3 alpha0.2.1.4 alpha0.2.1.5 alpha0.2.1.6 alpha0.2.1.7 alpha0.2.1.8 alpha0.2.1.9 alpha0.2.2.10.2.2.1 alpha0.2.2.10 alpha0.2.2.11 alpha0.2.2.12 alpha0.2.2.13 alpha0.2.2.14 alpha0.2.2.15 alpha0.2.2.16 alpha0.2.2.17 alpha0.2.2.18 alpha0.2.2.19 alpha0.2.2.20.2.2.2 alpha0.2.2.20 alpha0.2.2.30.2.2.3 alpha0.2.2.40.2.2.4 alpha0.2.2.50.2.2.5 alpha0.2.2.60.2.2.6 alpha0.2.2.7 alpha0.2.2.8 alpha0.2.2.9 alpha
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (6)
Mailing Listx_refsource_MLISTPatch
Source: [email protected]
http://archives.seul.org/or/announce/Jan-2011/msg00000.htmlx_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
http://blog.torproject.org/blog/tor-02129-released-security-patchesVDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/64888x_refsource_CONFIRMPatch
Source: [email protected]
https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLogQuick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card