CVE-2012-6129

2012-12-3100:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.071

Percentile

94.1%

JSON

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission
before 2.74 and possibly other products, allows remote attackers to cause a
denial of service (crash) and possibly execute arbitrary code via crafted
“micro transport protocol packets.”

Bugs

Notes

Author	Note
seth-arnold	transmission team may update patch based on how libutp upstream patches the issue

OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchtransmission< 2.33-0ubuntu2.1UNKNOWN
ubuntu12.04noarchtransmission< 2.51-0ubuntu1.3UNKNOWN
ubuntu12.10noarchtransmission< 2.61-0ubuntu2.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.10	noarch	transmission	< 2.33-0ubuntu2.1	UNKNOWN
ubuntu	12.04	noarch	transmission	< 2.51-0ubuntu1.3	UNKNOWN
ubuntu	12.10	noarch	transmission	< 2.61-0ubuntu2.2	UNKNOWN