CVE-2018-10756
Fixed in a distro release EPSS 3%
Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.
Products: transmissionbt transmission, debian_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | transmission | 3.00-1 |
| Debian 13 | transmission | 3.00-1 |
| Debian 14 | transmission | 3.00-1 |
| Debian 8 | transmission | 2.84-0.2+deb8u2 |
| Debian 9 | transmission | 2.92-2+deb9u2 |
| Ubuntu 16.04 LTS | transmission | no fix |
| Ubuntu 18.04 LTS | transmission | no fix |
| Ubuntu 20.04 LTS | transmission | no fix |