Skip to content
OpenAdvisories

Package · Debian

aria2

7 known vulnerabilities.

7 results · Feed

  • Medium 4.0

    aria2 <=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function.

  • Medium 6.2

    Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote…

  • Medium 4.8

    aria2c Improper Certificate Validation

    aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.

  • Unscored —

    aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, whi…

  • Unscored —

    Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory…

  • Unscored —

    Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, w…

  • Unscored —

    Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to…