How to Exploit BitTorrent for Large-Scale DoS Attacks

A flaw discovered in several widely used BitTorrent applications, including uTorrent, Vuze and Mainline, could be used to carry out a devastating distributed denial of service DDoS attack that makes it very easy for a single undetectable hacker to bring down large sites. A new research by Florian...

DEBIAN-CVE-2015-5685

The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...

CVE-2015-5685

The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...

CVE-2015-5685

The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...

UBUNTU-CVE-2015-5685

The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...

Input validation

The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...

CVE-2015-5685

The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...

CVE-2015-5685

The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...

CVE-2015-5685

CVE-2015-5685 affects the BitTorrent DHT bootstrap server (bootstrap-dht) and the libtorrent-rasterbar codebase. The vulnerability arises in the lazy_bdecode function, where improper indexing can allow a remote attacker to execute arbitrary code via a crafted packet. Several advisories reference ...

CVE-2015-5685

The lazybdecode function in BitTorrent DHT bootstrap server bootstrap-dht allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."...

Microsoft Graphics Component Information Disclosure Vulnerability (3013126)

This host is missing an important security update according to Microsoft Bulletin MS14-085. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] Fedora 20 Update: deluge-1.3.10-1.fc20

Deluge is a new BitTorrent client, created using Python and GTK+. It is intended to bring a native, full-featured client to Linux GTK+ desktop environments such as GNOME and XFCE. It supports features such as DHT Distributed Hash Tables, PEX =C2=B5Torrent-compatible Peer Exchange, an d UPnP...

[SECURITY] Fedora 21 Update: deluge-1.3.10-1.fc21

Deluge is a new BitTorrent client, created using Python and GTK+. It is intended to bring a native, full-featured client to Linux GTK+ desktop environments such as GNOME and XFCE. It supports features such as DHT Distributed Hash Tables, PEX =C2=B5Torrent-compatible Peer Exchange, an d UPnP...

CVE-2014-8509

The lazybdecode function in BitTorrent bootstrap-dht aka Bootstrap allows remote attackers to execute arbitrary code via a crafted packet, which triggers an out-of-bounds read, related to "Improper Indexing."...

Out-of-bounds

The lazybdecode function in BitTorrent bootstrap-dht aka Bootstrap allows remote attackers to execute arbitrary code via a crafted packet, which triggers an out-of-bounds read, related to "Improper Indexing."...

CVE-2014-8509

The lazybdecode function in BitTorrent bootstrap-dht aka Bootstrap allows remote attackers to execute arbitrary code via a crafted packet, which triggers an out-of-bounds read, related to "Improper Indexing."...

Opera <= 9.10 JPG Image DHT Marker Heap Corruption Vulnerabilities

No description provided by source. Opera JPEG processing - Heap corruption vulnerabilities ======================================================= Date..: 8th September 2006 31th October 2006 update 3rd November 2006 update 5th January 2007 public release...

BitComet <= 1.19 Remote DoS Exploit

No description provided by source. !/bin/sh BitComet = 1.19 Remote DOS Exploit Pierre Nogues - http://www.indahax.com/ Description: BitComet is a torrent client BitComet doesn't handle malicious DHT packet with an invalid bencoded message. Affected versions : BitComet = 1.19 Plateforms : Windows...

DEBIAN-CVE-2013-6630

The getdht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table DHT JPEG markers, which allows remote...

CVE-2013-1119

Buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted DHT index value in JPEG data within a WRF file, aka...