CVEvulnerability
CVE-2014-4909
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-189
Description
Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.
Affected configurations
• canonical ubuntu linux 12.04
• canonical ubuntu linux 13.10
• canonical ubuntu linux 14.04
• fedoraproject fedora 20
• gentoo linux
• transmissionbt transmission (<= 2.83)
• transmissionbt transmission 0.1
• transmissionbt transmission 0.2
• transmissionbt transmission 0.3
• transmissionbt transmission 0.4
• transmissionbt transmission 0.5
• transmissionbt transmission 0.6
• transmissionbt transmission 0.6.1
• transmissionbt transmission 0.70
• transmissionbt transmission 0.71
• transmissionbt transmission 0.72
• transmissionbt transmission 0.80
• transmissionbt transmission 0.81
• transmissionbt transmission 0.82
• transmissionbt transmission 0.90
• transmissionbt transmission 0.91
• transmissionbt transmission 0.92
• transmissionbt transmission 0.93
• transmissionbt transmission 0.94
• transmissionbt transmission 0.95
• transmissionbt transmission 0.96
• transmissionbt transmission 1.00
• transmissionbt transmission 1.01
• transmissionbt transmission 1.02
• transmissionbt transmission 1.2
• transmissionbt transmission 1.03
• transmissionbt transmission 1.04
• transmissionbt transmission 1.05
• transmissionbt transmission 1.06
• transmissionbt transmission 1.10
• transmissionbt transmission 1.11
• transmissionbt transmission 1.20
• transmissionbt transmission 1.21
• transmissionbt transmission 1.22
• transmissionbt transmission 1.30
• transmissionbt transmission 1.31
• transmissionbt transmission 1.32
• transmissionbt transmission 1.33
• transmissionbt transmission 1.34
• transmissionbt transmission 1.40
• transmissionbt transmission 1.41
• transmissionbt transmission 1.42
• transmissionbt transmission 1.50
• transmissionbt transmission 1.51
• transmissionbt transmission 1.52
• transmissionbt transmission 1.53
• transmissionbt transmission 1.54
• transmissionbt transmission 1.60
• transmissionbt transmission 1.61
• transmissionbt transmission 1.70
• transmissionbt transmission 1.71
• transmissionbt transmission 1.72
• transmissionbt transmission 1.73
• transmissionbt transmission 1.74
• transmissionbt transmission 1.75
… and 45 more
Related
Weakness · not in database (1)
References
- http://inertiawar.com/submission.go Exploit
- http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135539.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-updates/2014-08/msg00011.html lists.opensuse.org
- http://secunia.com/advisories/59897 secunia.com
- http://secunia.com/advisories/60108 secunia.com
- http://secunia.com/advisories/60527 secunia.com
- http://www.debian.org/security/2014/dsa-2988 www.debian.org
- http://www.openwall.com/lists/oss-security/2014/07/10/4 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/07/11/5 www.openwall.com
- http://www.osvdb.org/108997 www.osvdb.org
- http://www.securityfocus.com/bid/68487 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2279-1 www.ubuntu.com
- https://bugs.gentoo.org/show_bug.cgi?id=516822 bugs.gentoo.org
- https://bugzilla.redhat.com/show_bug.cgi?id=1118290 bugzilla.redhat.com
- https://trac.transmissionbt.com/wiki/Changes#version-2.84 Vendor Advisory
- https://twitter.com/benhawkes/statuses/484378151959539712 twitter.com
- http://inertiawar.com/submission.go Exploit
- http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135539.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-updates/2014-08/msg00011.html lists.opensuse.org
- http://secunia.com/advisories/59897 secunia.com
- http://secunia.com/advisories/60108 secunia.com
- http://secunia.com/advisories/60527 secunia.com
- http://www.debian.org/security/2014/dsa-2988 www.debian.org
- http://www.openwall.com/lists/oss-security/2014/07/10/4 www.openwall.com
- http://www.openwall.com/lists/oss-security/2014/07/11/5 www.openwall.com
- http://www.osvdb.org/108997 www.osvdb.org
- http://www.securityfocus.com/bid/68487 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2279-1 www.ubuntu.com
- https://bugs.gentoo.org/show_bug.cgi?id=516822 bugs.gentoo.org
- https://bugzilla.redhat.com/show_bug.cgi?id=1118290 bugzilla.redhat.com
- https://trac.transmissionbt.com/wiki/Changes#version-2.84 Vendor Advisory
- https://twitter.com/benhawkes/statuses/484378151959539712 twitter.com