Every CVESearch/Get API key

CVE-2010-1676

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote...

10.0 HighFix available

CVE-2010-1676 is a high vulnerability (CVSS 10.0) in Tor, published December 21, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.88%, the 94th percentile. Fixed in tor 0.2.1.26-6.

What does this mean?
Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
7.88%EPSS, 94th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.2.1.26-6tor +3 more

Description

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Exploit likelihood

7.88%Down 0.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tor
Debian:12
before 0.2.1.26-6
0.2.1.26-6
tor
Debian:13
before 0.2.1.26-6
0.2.1.26-6
tor
Debian:14
before 0.2.1.26-6
0.2.1.26-6
tor
Debian:5.0
before 0.2.1.26-1~lenny+4, plus listed versions
0.2.0.33-10.2.0.34-10.2.0.34-1~bpo40+10.2.0.35-10.2.0.35-1~lenny1
Show 36 moreShow less
0.2.0.35-1~lenny20.2.1.10-alpha-10.2.1.11-alpha-10.2.1.12-alpha-10.2.1.13-alpha-10.2.1.14-rc-10.2.1.15-rc-10.2.1.16-rc-10.2.1.17-rc-10.2.1.18-10.2.1.19-10.2.1.2-alpha-10.2.1.20-10.2.1.20-20.2.1.21-10.2.1.21-1~bpo50+10.2.1.22-10.2.1.22-1~bpo50+10.2.1.23-10.2.1.23-20.2.1.25-10.2.1.25-1~bpo50+10.2.1.25-20.2.1.25-30.2.1.26-1~bpo50+10.2.1.26-1~lenny+10.2.1.26-1~lenny+20.2.1.26-1~lennyvolatile10.2.1.26-1~lennyvolatile20.2.1.4-alpha-10.2.1.5-alpha-10.2.1.6-alpha-10.2.1.7-alpha-10.2.1.7-alpha-20.2.1.8-alpha-10.2.1.9-alpha-1
0.2.1.26-1~lenny+4

What each source reports

NVD Score used10.0

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
CVE-2010-1676
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
CVE-2010-1676
Updated
2026-11-02
EUVDEUVD-2010-1696No score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
EUVD-2010-1696
Updated
2026-11-03
GitHub AdvisoriesGHSA-pqjq-7p8q-hp58No score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote...

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
GHSA-pqjq-7p8q-hp58
Weakness
CWE-119
Updated
2026-11-02
OSVNo score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
CVE-2010-1676
Updated
2026-11-02
OSVDEBIAN-CVE-2010-1676No score

Heap-based buffer overflow in Tor before 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspecified vectors.

Record
DEBIAN-CVE-2010-1676
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 13 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open