Lucene search

K
osvGoogleOSV:DSA-1815-1
HistoryJun 14, 2009 - 12:00 a.m.

libtorrent-rasterbar - denial of service

2009-06-1400:00:00
Google
osv.dev
9

0.005 Low

EPSS

Percentile

77.3%

It was discovered that the Rasterbar Bittorrent library performed
insufficient validation of path names specified in torrent files, which
could lead to denial of service by overwriting files.

The old stable distribution (etch) doesn’t include libtorrent-rasterbar.

For the stable distribution (lenny), this problem has been fixed in
version 0.13.1-2+lenny1.

For the unstable distribution (sid), this problem has been fixed in
version 0.14.4-1.

We recommend that you upgrade your libtorrent-rasterbar package.

CPENameOperatorVersion
libtorrent-rasterbareq0.13.1-2