Ubuntu 16.04 ESM : libtorrent vulnerability (USN-4790-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4790-1 advisory. It was discovered that libtorrent incorrectly handled chunked headers. A remote attacker could possibly use this to cause a crash resulting in a denial of service...

openSUSE Security Update : libtorrent-rasterbar (openSUSE-2016-1074)

This update for libtorrent-rasterbar fixes the following issues : - Update to version 1.0.10 : - Fix inverted priority of incoming piece suggestions. - Fix a crash on invalid input in httpparser. - Add a new 'preformatted' type to bencode entry variant type. - Fix division by zero in super-seedin...

FreeBSD : libtorrent-rasterbar -- denial of service (093584f2-3f14-11e6-b3c8-14dae9d210b8)

Brandon Perry reports : The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

CVE-2016-5301

CVE-2016-5301 affects libtorrent before 1.1.1, where the parse_chunk_header function can be triggered by a crafted HTTP response or a UPnP broadcast to cause a denial of service (crash). Multiple public advisories and notices (Debian, Ubuntu USN-4790-1, Mageia MGASA-2016-0234, openSUSE openSUSE-2...

CVE-2016-5301

The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service crash via a crafted 1 HTTP response or possibly a 2 UPnP broadcast...

openSUSE Security Update : libtorrent-rasterbar (openSUSE-2016-774)

This update for libtorrent-rasterbar fixes the following issues : - CVE-2016-5301: Crash on invalid input in httpparser could have allowed a remote attacker to perform a denial of service attack boo983228. In addition, the package was updated to 1.0.9 / 1.16.19, fixing various upstream bugs...