Updated libtorrent-rasterbar packages fix security vulnerability

A specially crafted HTTP response from a tracker or potentially a UPnP broadcast can crash libtorrent-rasterbar in the parsechunkheader function. Although this function is not present in this version, upstream's additional sanity checks were added to abort the program if necessary instead of...

FreeBSD : libtorrent-rasterbar -- denial of service (093584f2-3f14-11e6-b3c8-14dae9d210b8)

Brandon Perry reports : The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

DEBIAN-CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

Design/Logic Flaw

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

UBUNTU-CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

CVE-2016-5301

CVE-2016-5301 affects libtorrent before 1.1.1, where the parse_chunk_header function can be triggered by a crafted HTTP response or a UPnP broadcast to cause a denial of service (crash). Multiple public advisories and notices (Debian, Ubuntu USN-4790-1, Mageia MGASA-2016-0234, openSUSE openSUSE-2...

CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

CVE-2016-5301: Improper Input Validation

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

PT-2016-2290

Name of the Vulnerable Software and Affected Versions libtorrent versions prior to 1.1.1 Description The issue is related to the parse chunk header function, which does not properly check input data. This can be exploited by a remote attacker to cause a denial of service crash via a crafted HTTP...

openSUSE Security Update : libtorrent-rasterbar (openSUSE-2016-774)

This update for libtorrent-rasterbar fixes the following issues : - CVE-2016-5301: Crash on invalid input in httpparser could have allowed a remote attacker to perform a denial of service attack boo983228. In addition, the package was updated to 1.0.9 / 1.16.19, fixing various upstream bugs...

openSUSE Security Update : libtorrent-rasterbar (openSUSE-2016-751)

This update for libtorrent-rasterbar fixes the following issues : - CVE-2016-5301: Crash on invalid input in httpparser could have allowed a remote attacker to perform a denial of service attack boo983228. In addition, the package was updated to 1.0.9 / 1.16.19, fixing various upstream bugs...

Debian DLA-511-1 : libtorrent-rasterbar security update

A specially crafted HTTP response from a tracker or potentially a UPnP broadcast can crash libtorrent in the parsechunkheader function. Although this function is not present in this version, upstream's additional sanity checks were added to abort the program if necessary instead of crashing it. F...

[SECURITY] [DLA 511-1] libtorrent-rasterbar security update

Package : libtorrent-rasterbar Version : 0.15.10-1+deb7u1 CVE ID : CVE-2016-5301 Debian Bug : 826380 A specially crafted HTTP response from a tracker or potentially a UPnP broadcast can crash libtorrent in the parsechunkheader function. Although this function is not present in this version,...

DLA-511-1 libtorrent-rasterbar - security update

Bulletin has no description...

libtorrent Denial of Service Vulnerability

libtorrent is an open source C++ Bittorrent library developed by software developer Arvid Norberg, which provides high performance and good code style of the BT development kit, and supports crawling file pages directly through the network stack. A security vulnerability exists in the...

libtorrent-rasterbar -- denial of service

Brandon Perry reports: The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...