Back to Database
Status published
High
CVE-2011-2778
Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote...
Vulnerability Description
Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-2778
Credits & Attribution
No credits recorded in the NVD database.
References
More from tor
View All →CVE-2012-3519
routerlist.c in Tor before 0.2.2.38 uses a different amount of...
Medium
5
CVE-2012-3518
The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does...
Medium
5
CVE-2012-3517
Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow...
Medium
5
CVE-2011-4897
Tor before 0.2.2.25-alpha, when configured as a relay without the...
Medium
4.3
CVE-2011-4896
Tor before 0.2.2.24-alpha continues to use a reachable bridge that...
Medium
4.3
Affected Vendor
Affected Software
tor
Vulnerable Versions:
0, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.6.1, 0.0.6.2, 0.0.7, 0.0.7.1, 0.0.7.2, 0.0.7.3, 0.0.8, 0.0.8.1, 0.0.9, 0.0.9.1, 0.0.9.2, 0.0.9.3, 0.0.9.4, 0.0.9.5, 0.0.9.6, 0.0.9.7, 0.0.9.8, 0.0.9.9, 0.0.9.10, 0.1.0.1, 0.1.0.2, 0.1.0.3, 0.1.0.4, 0.1.0.5, 0.1.0.6, 0.1.0.7, 0.1.0.8, 0.1.0.9, 0.1.0.10, 0.1.0.11, 0.1.0.12, 0.1.0.13, 0.1.0.14, 0.1.0.15, 0.1.0.16, 0.1.0.17, 0.1.0.18, 0.1.0.19, 0.1.1, 0.1.1.1, 0.1.1.2, 0.1.1.3, 0.1.1.4, 0.1.1.5, 0.1.1.6, 0.1.1.7, 0.1.1.8, 0.1.1.9, 0.1.1.10, 0.1.1.11, 0.1.1.12, 0.1.1.13, 0.1.1.14, 0.1.1.15, 0.1.1.16, 0.1.1.17, 0.1.1.18, 0.1.1.19, 0.1.1.20, 0.1.1.21, 0.1.1.22, 0.1.1.23, 0.1.1.25, 0.1.1.26, 0.1.2.1, 0.1.2.2, 0.1.2.3, 0.1.2.4, 0.1.2.5, 0.1.2.6, 0.1.2.7, 0.1.2.8, 0.1.2.9, 0.1.2.10, 0.1.2.11, 0.1.2.12, 0.1.2.13, 0.1.2.14, 0.1.2.15, 0.1.2.16, 0.1.2.17, 0.1.2.18, 0.1.2.19, 0.1.2.30, 0.1.2.31, 0.2.0.1, 0.2.0.2, 0.2.0.3, 0.2.0.4, 0.2.0.5, 0.2.0.6, 0.2.0.7, 0.2.0.8, 0.2.0.9, 0.2.0.10, 0.2.0.11, 0.2.0.12, 0.2.0.13, 0.2.0.14, 0.2.0.15, 0.2.0.16, 0.2.0.17, 0.2.0.18, 0.2.0.19, 0.2.0.20, 0.2.0.21, 0.2.0.22, 0.2.0.23, 0.2.0.24, 0.2.0.25, 0.2.0.26, 0.2.0.27, 0.2.0.28, 0.2.0.29, 0.2.0.30, 0.2.0.31, 0.2.0.32, 0.2.0.33, 0.2.0.34, 0.2.0.35, 0.2.1.1, 0.2.1.1.1, 0.2.1.1.2, 0.2.1.1.3, 0.2.1.1.4, 0.2.1.1.5, 0.2.1.1.6, 0.2.1.1.7, 0.2.1.1.8, 0.2.1.1.9, 0.2.1.1.10, 0.2.1.1.11, 0.2.1.1.12, 0.2.1.1.13, 0.2.1.1.14, 0.2.1.1.15, 0.2.1.1.16, 0.2.1.1.17, 0.2.1.1.18, 0.2.1.1.19, 0.2.1.1.20, 0.2.1.1.21, 0.2.1.1.22, 0.2.1.1.23, 0.2.1.1.24, 0.2.1.1.25, 0.2.1.1.26, 0.2.1.1.27, 0.2.1.1.28, 0.2.1.2, 0.2.1.3, 0.2.1.4, 0.2.1.5, 0.2.1.6, 0.2.1.7, 0.2.1.8, 0.2.1.9, 0.2.1.10, 0.2.1.11, 0.2.1.12, 0.2.1.13, 0.2.1.14, 0.2.1.15, 0.2.1.16, 0.2.1.17, 0.2.1.18, 0.2.1.19, 0.2.1.20, 0.2.1.21, 0.2.1.22, 0.2.1.23, 0.2.1.24, 0.2.1.25, 0.2.1.26, 0.2.1.27, 0.2.1.28, 0.2.1.29, 0.2.2.1, 0.2.2.2, 0.2.2.3, 0.2.2.4, 0.2.2.5, 0.2.2.6, 0.2.2.7, 0.2.2.8, 0.2.2.9, 0.2.2.10, 0.2.2.11, 0.2.2.12, 0.2.2.13, 0.2.2.14, 0.2.2.15, 0.2.2.16, 0.2.2.17, 0.2.2.18, 0.2.2.19, 0.2.2.20, 0.2.2.29, 0.2.2.32, 0.2.2.33
Timeline
Official Publish:
December 23rd, 2011
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.