Description
Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | transmission | 1.77-1 | — |
| Debian 13 | transmission | 1.77-1 | — |
| Debian 12 | transmission | 1.77-1 | — |
| Debian 5.0 | transmission | 1.22-1+lenny2 | DSA-1967-1 |
Advisories 1
- DSA-1967-1 transmission - directory traversal Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://trac.transmissionbt.com/wiki/Changes#version-1.77
- [oss-security] 20100106 Re: CVE Request: Transmission mailing-list
- https://launchpad.net/bugs/500625
- http://security.debian.org/pool/updates/main/t/transmission/transmission_1.22-1+lenny2.diff.gz
- http://trac.transmissionbt.com/changeset/9829/
- 38005 third-party-advisory
- ADV-2010-0071 vdb-entry
- DSA-1967 vendor-advisory
- transmission-name-directory-traversal(55454) vdb-entry
- [oss-security] 20100106 CVE Request: Transmission mailing-list
- 37993 third-party-advisory
- SUSE-SA:2010:008 vendor-advisory
- [debian-devel-changes] 20100105 Accepted transmission 1.77-1 (source all amd64) mailing-list