CVE-2014-4909 Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a...
MediumCVSS 6.8
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/transmission(Debian:12) | < 2.84-0.1 | 2.84-0.1 |
| debian/transmission(Debian:13) | < 2.84-0.1 | 2.84-0.1 |
| debian/transmission(Debian:14) | < 2.84-0.1 | 2.84-0.1 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 13.10 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| fedoraproject fedora | = 20 | No fix listed |
| gentoo linux | All versions | No fix listed |
| transmissionbt transmission | <= 2.83 | No fix listed |
| transmissionbt transmission | = 0.1 | No fix listed |
| transmissionbt transmission | = 0.2 | No fix listed |
| transmissionbt transmission | = 0.3 | No fix listed |
| transmissionbt transmission | = 0.4 | No fix listed |
| transmissionbt transmission | = 0.5 | No fix listed |
| transmissionbt transmission | = 0.6 | No fix listed |
| transmissionbt transmission | = 0.6.1 | No fix listed |
| transmissionbt transmission | = 0.70 | No fix listed |
| transmissionbt transmission | = 0.71 | No fix listed |
| transmissionbt transmission | = 0.72 | No fix listed |
| transmissionbt transmission | = 0.80 | No fix listed |
| transmissionbt transmission | = 0.81 | No fix listed |
| transmissionbt transmission | = 0.82 | No fix listed |
| transmissionbt transmission | = 0.90 | No fix listed |
| transmissionbt transmission | = 0.91 | No fix listed |
| transmissionbt transmission | = 0.92 | No fix listed |
Show 83 more
| Product | Affected versions | Fixed in |
|---|---|---|
| transmissionbt transmission | = 0.93 | No fix listed |
| transmissionbt transmission | = 0.94 | No fix listed |
| transmissionbt transmission | = 0.95 | No fix listed |
| transmissionbt transmission | = 0.96 | No fix listed |
| transmissionbt transmission | = 1.00 | No fix listed |
| transmissionbt transmission | = 1.01 | No fix listed |
| transmissionbt transmission | = 1.02 | No fix listed |
| transmissionbt transmission | = 1.2 | No fix listed |
| transmissionbt transmission | = 1.03 | No fix listed |
| transmissionbt transmission | = 1.04 | No fix listed |
| transmissionbt transmission | = 1.05 | No fix listed |
| transmissionbt transmission | = 1.06 | No fix listed |
| transmissionbt transmission | = 1.10 | No fix listed |
| transmissionbt transmission | = 1.11 | No fix listed |
| transmissionbt transmission | = 1.20 | No fix listed |
| transmissionbt transmission | = 1.21 | No fix listed |
| transmissionbt transmission | = 1.22 | No fix listed |
| transmissionbt transmission | = 1.30 | No fix listed |
| transmissionbt transmission | = 1.31 | No fix listed |
| transmissionbt transmission | = 1.32 | No fix listed |
| transmissionbt transmission | = 1.33 | No fix listed |
| transmissionbt transmission | = 1.34 | No fix listed |
| transmissionbt transmission | = 1.40 | No fix listed |
| transmissionbt transmission | = 1.41 | No fix listed |
| transmissionbt transmission | = 1.42 | No fix listed |
| transmissionbt transmission | = 1.50 | No fix listed |
| transmissionbt transmission | = 1.51 | No fix listed |
| transmissionbt transmission | = 1.52 | No fix listed |
| transmissionbt transmission | = 1.53 | No fix listed |
| transmissionbt transmission | = 1.54 | No fix listed |
| transmissionbt transmission | = 1.60 | No fix listed |
| transmissionbt transmission | = 1.61 | No fix listed |
| transmissionbt transmission | = 1.70 | No fix listed |
| transmissionbt transmission | = 1.71 | No fix listed |
| transmissionbt transmission | = 1.72 | No fix listed |
| transmissionbt transmission | = 1.73 | No fix listed |
| transmissionbt transmission | = 1.74 | No fix listed |
| transmissionbt transmission | = 1.75 | No fix listed |
| transmissionbt transmission | = 1.76 | No fix listed |
| transmissionbt transmission | = 1.77 | No fix listed |
| transmissionbt transmission | = 1.80 | No fix listed |
| transmissionbt transmission | = 1.81 | No fix listed |
| transmissionbt transmission | = 1.82 | No fix listed |
| transmissionbt transmission | = 1.83 | No fix listed |
| transmissionbt transmission | = 1.90 | No fix listed |
| transmissionbt transmission | = 1.91 | No fix listed |
| transmissionbt transmission | = 1.92 | No fix listed |
| transmissionbt transmission | = 1.93 | No fix listed |
| transmissionbt transmission | = 2.00 | No fix listed |
| transmissionbt transmission | = 2.01 | No fix listed |
| transmissionbt transmission | = 2.02 | No fix listed |
| transmissionbt transmission | = 2.03 | No fix listed |
| transmissionbt transmission | = 2.04 | No fix listed |
| transmissionbt transmission | = 2.10 | No fix listed |
| transmissionbt transmission | = 2.11 | No fix listed |
| transmissionbt transmission | = 2.12 | No fix listed |
| transmissionbt transmission | = 2.13 | No fix listed |
| transmissionbt transmission | = 2.20 | No fix listed |
| transmissionbt transmission | = 2.21 | No fix listed |
| transmissionbt transmission | = 2.22 | No fix listed |
| transmissionbt transmission | = 2.30 | No fix listed |
| transmissionbt transmission | = 2.31 | No fix listed |
| transmissionbt transmission | = 2.32 | No fix listed |
| transmissionbt transmission | = 2.33 | No fix listed |
| transmissionbt transmission | = 2.40 | No fix listed |
| transmissionbt transmission | = 2.41 | No fix listed |
| transmissionbt transmission | = 2.42 | No fix listed |
| transmissionbt transmission | = 2.50 | No fix listed |
| transmissionbt transmission | = 2.51 | No fix listed |
| transmissionbt transmission | = 2.52 | No fix listed |
| transmissionbt transmission | = 2.60 | No fix listed |
| transmissionbt transmission | = 2.61 | No fix listed |
| transmissionbt transmission | = 2.70 | No fix listed |
| transmissionbt transmission | = 2.71 | No fix listed |
| transmissionbt transmission | = 2.72 | No fix listed |
| transmissionbt transmission | = 2.73 | No fix listed |
| transmissionbt transmission | = 2.74 | No fix listed |
| transmissionbt transmission | = 2.75 | No fix listed |
| transmissionbt transmission | = 2.76 | No fix listed |
| transmissionbt transmission | = 2.77 | No fix listed |
| transmissionbt transmission | = 2.80 | No fix listed |
| transmissionbt transmission | = 2.81 | No fix listed |
| transmissionbt transmission | = 2.82 | No fix listed |
References
- Debian Security Tracker CVE-2014-4909 vendor-advisory
- inertiawar.com exploit
- FEDORA-2014-8331 vendor-advisory
- openSUSE-SU-2014:0980 vendor-advisory
- 59897 third-party-advisory
- 60108 third-party-advisory
- 60527 third-party-advisory
- DSA-2988 vendor-advisory
- [oss-security] 20140710 CVE request: transmission peer communication vulnerability mailing-list
- [oss-security] 20140711 Re: CVE request: transmission peer communication vulnerability mailing-list
- 108997 vdb-entry
- 68487 vdb-entry
- USN-2279-1 vendor-advisory
- bugs.gentoo.org
- bugzilla.redhat.com
- trac.transmissionbt.com vendor-advisory
- twitter.com
- bugs.debian.org issue-tracking