7 results · Feed
-
Medium 4.0
aria2 <=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function.
-
Medium 6.2
Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote…
-
Medium 4.8
aria2c Improper Certificate Validation
aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.
-
Unscored —
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, whi…
-
Unscored —
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory…
-
Unscored —
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, w…
-
Unscored —
Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to…