Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-0012

Fixed in a distro release EPSS 4%

Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file.

Published 2010-01-08 · CVE record · OSV

Products: transmissionbt transmission, debian_linux, opensuse

Distro releases

ReleasePackageFixed in
Debian 12transmission1.77-1
Debian 13transmission1.77-1
Debian 14transmission1.77-1
Debian 5.0transmission1.22-1+lenny2