Every CVE Search/ Get API key

CVE-2010-1676

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote...

10.0 HighFix available

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Exploit likelihood

7.88%Down 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
CVE-2010-1676
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
CVE-2010-1676
Updated
2026-11-02
EUVDEUVD-2010-1696 No score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
EUVD-2010-1696
Updated
2026-11-03
GitHub AdvisoriesGHSA-pqjq-7p8q-hp58 No score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote...

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
GHSA-pqjq-7p8q-hp58
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
CVE-2010-1676
Updated
2026-11-02
OSVDEBIAN-CVE-2010-1676 No score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
DEBIAN-CVE-2010-1676
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tor
Debian:12
 before 0.2.1.26-6
0.2.1.26-6
tor
Debian:13
 before 0.2.1.26-6
0.2.1.26-6
tor
Debian:14
 before 0.2.1.26-6
0.2.1.26-6
tor
Debian:5.0
 before 0.2.1.26-1~lenny+4, plus listed versions
0.2.0.33-10.2.0.34-10.2.0.34-1~bpo40+10.2.0.35-10.2.0.35-1~lenny1
Show 36 moreShow less
0.2.0.35-1~lenny20.2.1.10-alpha-10.2.1.11-alpha-10.2.1.12-alpha-10.2.1.13-alpha-10.2.1.14-rc-10.2.1.15-rc-10.2.1.16-rc-10.2.1.17-rc-10.2.1.18-10.2.1.19-10.2.1.2-alpha-10.2.1.20-10.2.1.20-20.2.1.21-10.2.1.21-1~bpo50+10.2.1.22-10.2.1.22-1~bpo50+10.2.1.23-10.2.1.23-20.2.1.25-10.2.1.25-1~bpo50+10.2.1.25-20.2.1.25-30.2.1.26-1~bpo50+10.2.1.26-1~lenny+10.2.1.26-1~lenny+20.2.1.26-1~lennyvolatile10.2.1.26-1~lennyvolatile20.2.1.4-alpha-10.2.1.5-alpha-10.2.1.6-alpha-10.2.1.7-alpha-10.2.1.7-alpha-20.2.1.8-alpha-10.2.1.9-alpha-1
0.2.1.26-1~lenny+4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1676 is a high vulnerability (CVSS 10.0) in Tor, published December 21, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.88%, the 94th percentile. Fixed in tor 0.2.1.26-6.

References

Show 13 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open