CVE-2011-0016: Tor before 0.2.1.29 and 0.2.2.x before… (CVSS 2.1)

Description

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.

Exploit likelihood

0.40%Down 1.1 points since Feb 4, 2022

Affected products

tor

Affected packages

Affected packages
Package	Affected	Fixed
`tor` Debian:12	before 0.2.1.29-1	0.2.1.29-1
`tor` Debian:13	before 0.2.1.29-1	0.2.1.29-1
`tor` Debian:14	before 0.2.1.29-1	0.2.1.29-1
`tor` Debian:5.0 From an advisory covering 7 CVEs	before 0.2.1.29-1~lenny+1, plus listed versions 0.2.0.33-10.2.0.34-10.2.0.34-1~bpo40+10.2.0.35-10.2.0.35-1~lenny1 Show 45 moreShow less 0.2.0.35-1~lenny20.2.1.10-alpha-10.2.1.11-alpha-10.2.1.12-alpha-10.2.1.13-alpha-10.2.1.14-rc-10.2.1.15-rc-10.2.1.16-rc-10.2.1.17-rc-10.2.1.18-10.2.1.19-10.2.1.2-alpha-10.2.1.20-10.2.1.20-20.2.1.21-10.2.1.21-1~bpo50+10.2.1.22-10.2.1.22-1~bpo50+10.2.1.23-10.2.1.23-20.2.1.25-10.2.1.25-1~bpo50+10.2.1.25-20.2.1.25-30.2.1.26-10.2.1.26-1~bpo50+10.2.1.26-1~lenny+10.2.1.26-1~lenny+20.2.1.26-1~lenny+40.2.1.26-1~lennyvolatile10.2.1.26-1~lennyvolatile20.2.1.26-20.2.1.26-30.2.1.26-40.2.1.26-4~bpo50+10.2.1.26-50.2.1.26-60.2.1.26-6~bpo50+10.2.1.4-alpha-10.2.1.5-alpha-10.2.1.6-alpha-10.2.1.7-alpha-10.2.1.7-alpha-20.2.1.8-alpha-10.2.1.9-alpha-1	0.2.1.29-1~lenny+1

What each source reports

NVD Score used2.1

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.

Record: CVE-2011-0016
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-399
Updated: 2026-11-02

CVE ListNo score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.

Record: CVE-2011-0016
Updated: 2026-11-02

EUVDEUVD-2011-0042No score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.

Record: EUVD-2011-0042
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qr37-7423-hq8pNo score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory...

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.

Record: GHSA-qr37-7423-hq8p
Updated: 2026-11-02

OSVNo score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.

Record: CVE-2011-0016
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-0016No score

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly manage key data in memory, which might allow local users to obtain sensitive information by leveraging the ability to read memory that was previously used by a different process.

Record: DEBIAN-CVE-2011-0016
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 10 moreShow less