312 matches found
CVE-2016-10519
A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory...
CVE-2016-10519
The CVE-2016-10519 entry describes a vulnerability in bittorrent-dht before 5.1.3 where an attacker can send a crafted sequence of messages to a listening peer to cause disclosure of internal memory. Affected component: bittorrent-dht (Node.js implementation). Root cause: insecure handling of mes...
@andrewosh/torrent-docker (>=1.6.0, <=1.6.1), @c0b41/torrent (1.0.0) +54 more potentially affected by CVE-2016-10519 via bittorrent-dht (>=0.5.0, <=4.0.4)
bittorrent-dht NPM version =0.5.0, =1.6.0, =0.0.1, =0.1.0, =1.1.1, =0.1.0, =0.2.0, =0.0.1, =0.1.0, =2.0.0, =3.0.1 and more Source cves: CVE-2016-10519 Source advisory: MEND:CVE-2016-10519...
CVE-2016-10519: Insertion of Sensitive Information Into Sent Data
A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory...
PT-2018-4699
Name of the Vulnerable Software and Affected Versions bittorrent-dht versions prior to 5.1.3 Description A security issue in bittorrent-dht allows an attacker to send a specific series of messages to a listening peer, causing it to reveal internal memory. This remote memory disclosure vulnerabili...
[SECURITY] Fedora 26 Update: deluge-1.3.15-1.fc26
Deluge is a new BitTorrent client, created using Python and GTK+. It is intended to bring a native, full-featured client to Linux GTK+ desktop environments such as GNOME and XFCE. It supports features such as DHT Distributed Hash Tables, PEX =EF=BF=BD=EF=BF=BDTorrent-compatible Peer E xchange, an...
[SECURITY] Fedora 24 Update: deluge-1.3.15-1.fc24
Deluge is a new BitTorrent client, created using Python and GTK+. It is intended to bring a native, full-featured client to Linux GTK+ desktop environments such as GNOME and XFCE. It supports features such as DHT Distributed Hash Tables, PEX =EF=BF=BD=EF=BF=BDTorrent-compatible Peer E xchange, an...
[SECURITY] Fedora 24 Update: deluge-1.3.14-1.fc24
Deluge is a new BitTorrent client, created using Python and GTK+. It is intended to bring a native, full-featured client to Linux GTK+ desktop environments such as GNOME and XFCE. It supports features such as DHT Distributed Hash Tables, PEX =EF=BF=BD=EF=BF=BDTorrent-compatible Peer E xchange, an...
[SECURITY] Fedora 25 Update: deluge-1.3.14-1.fc25
Deluge is a new BitTorrent client, created using Python and GTK+. It is intended to bring a native, full-featured client to Linux GTK+ desktop environments such as GNOME and XFCE. It supports features such as DHT Distributed Hash Tables, PEX =EF=BF=BD=EF=BF=BDTorrent-compatible Peer E xchange, an...
Remote Memory Disclosure
Overview Versions of bittorrent-dht prior to 5.1.3 are affected by a remote memory disclosure vulnerability. This vulnerability allows an attacker to send a specific series of of messages to a listening peer and get it to reveal internal memory. There are two mitigating factors here, that slightl...
Mageia: Security Advisory (MGASA-2015-0428)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2015-0428 Updated libtorrent-rasterbar packages fixes security vulnerability
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing." Note while this CVE was reported against BitTorrent DHT Bootstrapt server, the same vulnerable code is available in...
Updated libtorrent-rasterbar packages fixes security vulnerability
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing." Note while this CVE was reported against BitTorrent DHT Bootstrapt server, the same vulnerable code is available in...
Debian DLA-312-1 : libtorrent-rasterbar security update
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to 'improper indexing.' Note while this CVE was reported against BitTorrent DHT Bootstrapt server, the same vulnerable code is available in...
[SECURITY] [DLA 312-1] libtorrent-rasterbar security update
Package : libtorrent-rasterbar Version : 0.14.10-2+deb6u1 CVE ID : CVE-2015-5685 Debian Bug : 797046 The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing." Note while this CV...
DLA-312-1 libtorrent-rasterbar - security update
Bulletin has no description...
Using BitTorrent Vulnerabilities to Launch Distributed Reflective DoS Attacks
Researchers warn that several protocols used by the peer-to-peer file sharing service BitTorrent, including a handful of clients that run the protocol, can be leveraged to carry out distributed reflective denial of service DRDoS attacks. Distributed reflective denial of service, or DRDoS attacks,...
How to Exploit BitTorrent for Large-Scale DoS Attacks
A flaw discovered in several widely used BitTorrent applications, including uTorrent, Vuze and Mainline, could be used to carry out a devastating distributed denial of service DDoS attack that makes it very easy for a single undetectable hacker to bring down large sites. A new research by Florian...
DEBIAN-CVE-2015-5685
The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...
