4 results · Feed
-
Medium 4.0
aria2 <=1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine() function.
-
Medium 6.2
Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrent_helper.cc, which allows a remote…
-
Medium 4.8
aria2c Improper Certificate Validation
aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.
-
Unscored —
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, whi…