6.8

CVE-2014-4909

Exploit
Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 12.04 Update - Edition lts
Canonical ≫ Ubuntu Linux Version 13.10
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Fedoraproject ≫ Fedora Version 20
Transmissionbt ≫ Transmission Version <= 2.83
Transmissionbt ≫ Transmission Version 0.1
Transmissionbt ≫ Transmission Version 0.2
Transmissionbt ≫ Transmission Version 0.3
Transmissionbt ≫ Transmission Version 0.4
Transmissionbt ≫ Transmission Version 0.5
Transmissionbt ≫ Transmission Version 0.6
Transmissionbt ≫ Transmission Version 0.6.1
Transmissionbt ≫ Transmission Version 0.70
Transmissionbt ≫ Transmission Version 0.71
Transmissionbt ≫ Transmission Version 0.72
Transmissionbt ≫ Transmission Version 0.80
Transmissionbt ≫ Transmission Version 0.81
Transmissionbt ≫ Transmission Version 0.82
Transmissionbt ≫ Transmission Version 0.90
Transmissionbt ≫ Transmission Version 0.91
Transmissionbt ≫ Transmission Version 0.92
Transmissionbt ≫ Transmission Version 0.93
Transmissionbt ≫ Transmission Version 0.94
Transmissionbt ≫ Transmission Version 0.95
Transmissionbt ≫ Transmission Version 0.96
Transmissionbt ≫ Transmission Version 1.00
Transmissionbt ≫ Transmission Version 1.01
Transmissionbt ≫ Transmission Version 1.02
Transmissionbt ≫ Transmission Version 1.2
Transmissionbt ≫ Transmission Version 1.03
Transmissionbt ≫ Transmission Version 1.04
Transmissionbt ≫ Transmission Version 1.05
Transmissionbt ≫ Transmission Version 1.06
Transmissionbt ≫ Transmission Version 1.10
Transmissionbt ≫ Transmission Version 1.11
Transmissionbt ≫ Transmission Version 1.20
Transmissionbt ≫ Transmission Version 1.21
Transmissionbt ≫ Transmission Version 1.22
Transmissionbt ≫ Transmission Version 1.30
Transmissionbt ≫ Transmission Version 1.31
Transmissionbt ≫ Transmission Version 1.32
Transmissionbt ≫ Transmission Version 1.33
Transmissionbt ≫ Transmission Version 1.34
Transmissionbt ≫ Transmission Version 1.40
Transmissionbt ≫ Transmission Version 1.41
Transmissionbt ≫ Transmission Version 1.42
Transmissionbt ≫ Transmission Version 1.50
Transmissionbt ≫ Transmission Version 1.51
Transmissionbt ≫ Transmission Version 1.52
Transmissionbt ≫ Transmission Version 1.53
Transmissionbt ≫ Transmission Version 1.54
Transmissionbt ≫ Transmission Version 1.60
Transmissionbt ≫ Transmission Version 1.61
Transmissionbt ≫ Transmission Version 1.70
Transmissionbt ≫ Transmission Version 1.71
Transmissionbt ≫ Transmission Version 1.72
Transmissionbt ≫ Transmission Version 1.73
Transmissionbt ≫ Transmission Version 1.74
Transmissionbt ≫ Transmission Version 1.75
Transmissionbt ≫ Transmission Version 1.76
Transmissionbt ≫ Transmission Version 1.77
Transmissionbt ≫ Transmission Version 1.80
Transmissionbt ≫ Transmission Version 1.81
Transmissionbt ≫ Transmission Version 1.82
Transmissionbt ≫ Transmission Version 1.83
Transmissionbt ≫ Transmission Version 1.90
Transmissionbt ≫ Transmission Version 1.91
Transmissionbt ≫ Transmission Version 1.92
Transmissionbt ≫ Transmission Version 1.93
Transmissionbt ≫ Transmission Version 2.00
Transmissionbt ≫ Transmission Version 2.01
Transmissionbt ≫ Transmission Version 2.02
Transmissionbt ≫ Transmission Version 2.03
Transmissionbt ≫ Transmission Version 2.04
Transmissionbt ≫ Transmission Version 2.10
Transmissionbt ≫ Transmission Version 2.11
Transmissionbt ≫ Transmission Version 2.12
Transmissionbt ≫ Transmission Version 2.13
Transmissionbt ≫ Transmission Version 2.20
Transmissionbt ≫ Transmission Version 2.21
Transmissionbt ≫ Transmission Version 2.22
Transmissionbt ≫ Transmission Version 2.30
Transmissionbt ≫ Transmission Version 2.31
Transmissionbt ≫ Transmission Version 2.32
Transmissionbt ≫ Transmission Version 2.33
Transmissionbt ≫ Transmission Version 2.40
Transmissionbt ≫ Transmission Version 2.41
Transmissionbt ≫ Transmission Version 2.42
Transmissionbt ≫ Transmission Version 2.50
Transmissionbt ≫ Transmission Version 2.51
Transmissionbt ≫ Transmission Version 2.52
Transmissionbt ≫ Transmission Version 2.60
Transmissionbt ≫ Transmission Version 2.61
Transmissionbt ≫ Transmission Version 2.70
Transmissionbt ≫ Transmission Version 2.71
Transmissionbt ≫ Transmission Version 2.72
Transmissionbt ≫ Transmission Version 2.73
Transmissionbt ≫ Transmission Version 2.74
Transmissionbt ≫ Transmission Version 2.75
Transmissionbt ≫ Transmission Version 2.76
Transmissionbt ≫ Transmission Version 2.77
Transmissionbt ≫ Transmission Version 2.80
Transmissionbt ≫ Transmission Version 2.81
Transmissionbt ≫ Transmission Version 2.82
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.41% 0.917
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://inertiawar.com/submission.go
Exploit
http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135539.html
http://lists.opensuse.org/opensuse-updates/2014-08/msg00011.html
http://secunia.com/advisories/59897
http://secunia.com/advisories/60108
http://secunia.com/advisories/60527
http://www.debian.org/security/2014/dsa-2988
http://www.openwall.com/lists/oss-security/2014/07/10/4
http://www.openwall.com/lists/oss-security/2014/07/11/5
http://www.osvdb.org/108997
http://www.securityfocus.com/bid/68487
http://www.ubuntu.com/usn/USN-2279-1
https://bugs.gentoo.org/show_bug.cgi?id=516822
https://bugzilla.redhat.com/show_bug.cgi?id=1118290
https://trac.transmissionbt.com/wiki/Changes#version-2.84
Vendor Advisory
https://twitter.com/benhawkes/statuses/484378151959539712