CVE-2014-4909
Fixed in a distro release EPSS 5%
Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.
Products: canonical ubuntu_linux, fedoraproject fedora, gentoo linux, transmissionbt transmission
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | transmission | 2.84-0.1 |
| Debian 13 | transmission | 2.84-0.1 |
| Debian 14 | transmission | 2.84-0.1 |
| Debian 7 | transmission | 2.52-3+nmu2 |
| Ubuntu 14.04 LTS | transmission | 2.82-1.1ubuntu3.1 |
| openSUSE Tumbleweed | transmission | 2.92-3.1 |