Lucene search

K
freebsdFreeBSD0523FB7E-8444-4E86-812D-8DE05F6F0DCE
HistoryAug 01, 2012 - 12:00 a.m.

libutp -- remote denial of service or arbitrary code execution

2012-08-0100:00:00
vuxml.freebsd.org
16

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.071

Percentile

94.1%

NVD reports:

Stack-based buffer overflow in utp.cpp in libutp, as used
in Transmission before 2.74 and possibly other products,
allows remote attackers to cause a denial of service (crash)
and possibly execute arbitrary code via crafted “micro
transport protocol packets.”

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.071

Percentile

94.1%