ISOMAN

CVE

CVE-2014-4909

Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.

Severity
MEDIUM
CVSS
6.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://inertiawar.com/submission.go
  2. http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135539.html
  3. http://lists.opensuse.org/opensuse-updates/2014-08/msg00011.html
  4. http://secunia.com/advisories/59897
  5. http://secunia.com/advisories/60108
  6. http://secunia.com/advisories/60527
  7. http://www.debian.org/security/2014/dsa-2988
  8. http://www.openwall.com/lists/oss-security/2014/07/10/4
  9. http://www.openwall.com/lists/oss-security/2014/07/11/5
  10. http://www.osvdb.org/108997
  11. http://www.securityfocus.com/bid/68487
  12. http://www.ubuntu.com/usn/USN-2279-1
  13. https://bugs.gentoo.org/show_bug.cgi?id=516822
  14. https://bugzilla.redhat.com/show_bug.cgi?id=1118290
  15. https://trac.transmissionbt.com/wiki/Changes#version-2.84
  16. https://twitter.com/benhawkes/statuses/484378151959539712
  17. http://inertiawar.com/submission.go
  18. http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135539.html
  19. http://lists.opensuse.org/opensuse-updates/2014-08/msg00011.html
  20. http://secunia.com/advisories/59897