CVE-2011-0427

Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors.

• CWE-119

• https://archives.seul.org/or/announce/Jan-2011/msg00000.htmlPatch
• https://blog.torproject.org/blog/tor-02129-released-security-patchesPatch, Vendor Advisory
• https://secunia.com/advisories/42905Vendor Advisory
• https://secunia.com/advisories/42907Vendor Advisory
• https://www.debian.org/security/2011/dsa-2148
• https://www.securityfocus.com/bid/45832
• https://www.securitytracker.com/id?1024980
• https://www.vupen.com/english/advisories/2011/0131Vendor Advisory
• https://www.vupen.com/english/advisories/2011/0132Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64748
• https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLogPatch
• https://archives.seul.org/or/announce/Jan-2011/msg00000.htmlPatch
• https://blog.torproject.org/blog/tor-02129-released-security-patchesPatch, Vendor Advisory
• https://secunia.com/advisories/42905Vendor Advisory
• https://secunia.com/advisories/42907Vendor Advisory
• https://www.debian.org/security/2011/dsa-2148
• https://www.securityfocus.com/bid/45832
• https://www.securitytracker.com/id?1024980
• https://www.vupen.com/english/advisories/2011/0131Vendor Advisory
• https://www.vupen.com/english/advisories/2011/0132Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64748
• https://gitweb.torproject.org/tor.git/blob/refs/heads/release-0.2.2:/ChangeLogPatch

Published

Jan 19, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0418The glob implementation in Pure-FTPd before 1.0.32, and in l…
• CVE-2011-0419Stack consumption vulnerability in the fnmatch implementatio…
• CVE-2011-0420The grapheme_extract function in the Internationalization ex…
• CVE-2011-0421The _zip_name_locate function in zip_name_locate.c in the Zi…
• CVE-2011-0423The PolyVision RoomWizard with firmware 3.2.3 has a default …
• CVE-2011-0426Directory traversal vulnerability in vCenter Server in VMwar…
• CVE-2011-0428Cross Site Scripting (XSS) in ikiwiki before 3.20110122 coul…6.1
• CVE-2011-0430Double free vulnerability in the Rx server process in OpenAF…
• CVE-2011-0431The afs_linux_lock function in afs/LINUX/osi_vnodeops.c in t…
• CVE-2011-0432Multiple SQL injection vulnerabilities in the get_userinfo m…
• CVE-2011-0433Heap-based buffer overflow in the linetoken function in afmp…
• CVE-2011-0434Multiple SQL injection vulnerabilities in Domain Technologie…