Description
Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmission 1.91 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted magnet URL with a large number of (1) tr or (2) ws links.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | transmission | 1.92-1 | — |
| Debian 13 | transmission | 1.92-1 | — |
| Debian 12 | transmission | 1.92-1 | — |
References
- 38814 vdb-entry
- 63066 vdb-entry
- http://trac.transmissionbt.com/wiki/Changes
- ADV-2010-0655 vdb-entry
- http://trac.transmissionbt.com/ticket/2965
- 39031 third-party-advisory
- http://trac.transmissionbt.com/changeset/10279