CVE-2011-1924

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-06-14 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the policy_summarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service (directory authority crash) via a crafted policy that triggers creation of a long port list.

Affected products

Tor: through 0.2.1.29; 0.0.2, 0.0.2_pre13, 0.0.2_pre14, 0.0.2_pre15, 0.0.2_pre16, 0.0.2_pre17 (+214)

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061258.html
http://secunia.com/advisories/43548
http://secunia.com/advisories/44862
http://www.securityfocus.com/bid/46618
https://bugzilla.redhat.com/show_bug.cgi?id=705192
https://bugzilla.redhat.com/show_bug.cgi?id=705194
https://gitweb.torproject.org/tor.git/commit/43414eb98821d3b5c6c65181d7545ce938f82c8e
https://lists.torproject.org/pipermail/tor-announce/2011-February/000000.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061258.html
http://secunia.com/advisories/43548
http://secunia.com/advisories/44862
http://www.securityfocus.com/bid/46618

Get alerted when CVE-2011-1924 or the next vulnerability affects your stack