Home > Vulnerability Database > CVE-2011-0490

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2011-0490

Good to know:

Date: January 19, 2011

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha makes calls to Libevent within Libevent log handlers, which might allow remote attackers to cause a denial of service (daemon crash) via vectors that trigger certain log messages.

Language: C

Severity Score

5.3

Related Resources (8)

Url: http://archives.seul.org/or/announce/Jan-2011/msg00000.html

Url: https://trac.torproject.org/projects/tor/ticket/2190

Url: http://www.securityfocus.com/bid/45953

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/64889

Url: http://blog.torproject.org/blog/tor-02129-released-security-patches

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-0490

Url: https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog

Url: https://www.mend.io/vulnerability-database/CVE-2011-0490

Severity Score

5.3

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us