Lucene search

K
osvGoogleOSV:DSA-1957-1
HistoryDec 28, 2009 - 12:00 a.m.

aria2 - arbitrary code execution

2009-12-2800:00:00
Google
osv.dev
7

EPSS

0.069

Percentile

93.9%

It was discovered that aria2, a high speed download utility, is prone
to a buffer overflow in the DHT routing code, which might lead to the
execution of arbitrary code.

The oldstable distribution (etch) is not affected by this problem.

For the stable distribution (lenny), this problem has been fixed in
version 0.14.0-1+lenny1. Binaries for powerpc, arm, ia64 and hppa will
be provided once they are available.

For the testing distribution (squeeze) and the unstable distribution
(sid), this problem has been fixed in version 1.2.0-1.

We recommend that you upgrade your aria2 packages.