CVEvulnerability
CVE-2012-6129
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-04-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted "micro transport protocol packets."
Affected configurations
• transmissionbt transmission (<= 2.73)
• transmissionbt transmission 0.1
• transmissionbt transmission 0.2
• transmissionbt transmission 0.3
• transmissionbt transmission 0.4
• transmissionbt transmission 0.5
• transmissionbt transmission 0.6
• transmissionbt transmission 0.6.1
• transmissionbt transmission 0.70
• transmissionbt transmission 0.71
• transmissionbt transmission 0.72
• transmissionbt transmission 0.80
• transmissionbt transmission 0.81
• transmissionbt transmission 0.82
• transmissionbt transmission 0.90
• transmissionbt transmission 0.91
• transmissionbt transmission 0.92
• transmissionbt transmission 0.93
• transmissionbt transmission 0.94
• transmissionbt transmission 0.95
• transmissionbt transmission 0.96
• transmissionbt transmission 1.00
• transmissionbt transmission 1.01
• transmissionbt transmission 1.02
• transmissionbt transmission 1.2
• transmissionbt transmission 1.03
• transmissionbt transmission 1.04
• transmissionbt transmission 1.05
• transmissionbt transmission 1.06
• transmissionbt transmission 1.10
• transmissionbt transmission 1.11
• transmissionbt transmission 1.20
• transmissionbt transmission 1.21
• transmissionbt transmission 1.22
• transmissionbt transmission 1.30
• transmissionbt transmission 1.31
• transmissionbt transmission 1.32
• transmissionbt transmission 1.33
• transmissionbt transmission 1.34
• transmissionbt transmission 1.40
• transmissionbt transmission 1.41
• transmissionbt transmission 1.42
• transmissionbt transmission 1.50
• transmissionbt transmission 1.51
• transmissionbt transmission 1.52
• transmissionbt transmission 1.53
• transmissionbt transmission 1.54
• transmissionbt transmission 1.60
• transmissionbt transmission 1.61
• transmissionbt transmission 1.70
• transmissionbt transmission 1.71
• transmissionbt transmission 1.72
• transmissionbt transmission 1.73
• transmissionbt transmission 1.74
• transmissionbt transmission 1.75
• transmissionbt transmission 1.76
• transmissionbt transmission 1.77
• transmissionbt transmission 1.80
• transmissionbt transmission 1.81
• transmissionbt transmission 1.82
… and 36 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00064.html lists.opensuse.org
- http://www.openwall.com/lists/oss-security/2013/02/13/1 www.openwall.com
- http://www.ubuntu.com/usn/USN-1747-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=909934 bugzilla.redhat.com
- https://trac.transmissionbt.com/changeset/13646 Exploit, Patch
- https://trac.transmissionbt.com/ticket/5002 trac.transmissionbt.com
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00064.html lists.opensuse.org
- http://www.openwall.com/lists/oss-security/2013/02/13/1 www.openwall.com
- http://www.ubuntu.com/usn/USN-1747-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=909934 bugzilla.redhat.com
- https://trac.transmissionbt.com/changeset/13646 Exploit, Patch
- https://trac.transmissionbt.com/ticket/5002 trac.transmissionbt.com