{ "schema_version": "1.4.0", "id": "GHSA-gv9p-397w-xfq9", "modified": "2022-05-17T02:02:17Z", "published": "2022-05-17T02:02:17Z", "aliases": [ "CVE-2011-0491" ], "details": "The tor_realloc function in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not validate a certain size value during memory allocation, which might allow remote attackers to cause a denial of service (daemon crash) via unspecified vectors, related to \"underflow errors.\"", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0491" }, { "type": "WEB", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64888" }, { "type": "WEB", "url": "https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLog" }, { "type": "WEB", "url": "https://trac.torproject.org/projects/tor/ticket/2324" }, { "type": "WEB", "url": "http://archives.seul.org/or/announce/Jan-2011/msg00000.html" }, { "type": "WEB", "url": "http://blog.torproject.org/blog/tor-02129-released-security-patches" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/45953" } ], "database_specific": { "cwe_ids": [ "CWE-20" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2011-01-19T12:00:00Z" } }