Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-4909

Fixed in a distro release EPSS 5%

Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.

Published 2014-07-29 · CVE record · OSV

Products: canonical ubuntu_linux, fedoraproject fedora, gentoo linux, transmissionbt transmission

Distro releases

ReleasePackageFixed in
Debian 12transmission2.84-0.1
Debian 13transmission2.84-0.1
Debian 14transmission2.84-0.1
Debian 7transmission2.52-3+nmu2
Ubuntu 14.04 LTStransmission2.82-1.1ubuntu3.1
openSUSE Tumbleweedtransmission2.92-3.1