Every CVE Search/ Get API key

CVE-2011-0015

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of...

5.0 MediumFix available

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor.

Exploit likelihood

3.10%Up 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor.

Record
CVE-2011-0015
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor.

Record
CVE-2011-0015
Updated
2026-11-02
EUVDEUVD-2011-0041 No score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor.

Record
EUVD-2011-0041
Updated
2026-11-03
GitHub AdvisoriesGHSA-v7v5-6ff8-q9c2 No score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of...

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor.

Record
GHSA-v7v5-6ff8-q9c2
Weakness
CWE-20
Updated
2026-11-02
OSV No score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor.

Record
CVE-2011-0015
Updated
2026-11-02
OSVDEBIAN-CVE-2011-0015 No score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor.

Record
DEBIAN-CVE-2011-0015
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tor
Debian:12
 before 0.2.1.29-1
0.2.1.29-1
tor
Debian:13
 before 0.2.1.29-1
0.2.1.29-1
tor
Debian:14
 before 0.2.1.29-1
0.2.1.29-1
tor
Debian:5.0
 before 0.2.1.29-1~lenny+1, plus listed versions
0.2.0.33-10.2.0.34-10.2.0.34-1~bpo40+10.2.0.35-10.2.0.35-1~lenny1
Show 45 moreShow less
0.2.0.35-1~lenny20.2.1.10-alpha-10.2.1.11-alpha-10.2.1.12-alpha-10.2.1.13-alpha-10.2.1.14-rc-10.2.1.15-rc-10.2.1.16-rc-10.2.1.17-rc-10.2.1.18-10.2.1.19-10.2.1.2-alpha-10.2.1.20-10.2.1.20-20.2.1.21-10.2.1.21-1~bpo50+10.2.1.22-10.2.1.22-1~bpo50+10.2.1.23-10.2.1.23-20.2.1.25-10.2.1.25-1~bpo50+10.2.1.25-20.2.1.25-30.2.1.26-10.2.1.26-1~bpo50+10.2.1.26-1~lenny+10.2.1.26-1~lenny+20.2.1.26-1~lenny+40.2.1.26-1~lennyvolatile10.2.1.26-1~lennyvolatile20.2.1.26-20.2.1.26-30.2.1.26-40.2.1.26-4~bpo50+10.2.1.26-50.2.1.26-60.2.1.26-6~bpo50+10.2.1.4-alpha-10.2.1.5-alpha-10.2.1.6-alpha-10.2.1.7-alpha-10.2.1.7-alpha-20.2.1.8-alpha-10.2.1.9-alpha-1
0.2.1.29-1~lenny+1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0015 is a medium vulnerability (CVSS 5.0) in Tor, published January 17, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.10%, the 87th percentile. Fixed in tor 0.2.1.29-1.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open