Lucene search

[email protected]CVE-2009-3617

HistoryOct 20, 2009 - 5:30 p.m.

CVE-2009-3617

2009-10-2017:30:01

CWE-134

[email protected]

web.nvd.nist.gov

cve-2009-3617

format string vulnerability

abstractcommand::onabort

aria2

remote code execution

denial of service

application crash

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.042 Low

EPSS

Percentile

92.3%

JSON

Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

tatsuhiro_tsujikawaaria2Range≤1.6.1

tatsuhiro_tsujikawaaria2Match0.11.3

tatsuhiro_tsujikawaaria2Match0.11.4

tatsuhiro_tsujikawaaria2Match0.11.5

tatsuhiro_tsujikawaaria2Match0.12.0

tatsuhiro_tsujikawaaria2Match0.12.1

tatsuhiro_tsujikawaaria2Match0.13.0

tatsuhiro_tsujikawaaria2Match0.13.0\+1

tatsuhiro_tsujikawaaria2Match0.13.1

tatsuhiro_tsujikawaaria2Match0.13.1\+1

tatsuhiro_tsujikawaaria2Match0.13.2

tatsuhiro_tsujikawaaria2Match0.13.2\+1

tatsuhiro_tsujikawaaria2Match0.14.0

tatsuhiro_tsujikawaaria2Match0.14.0\+1

tatsuhiro_tsujikawaaria2Match0.15.0

tatsuhiro_tsujikawaaria2Match0.15.1

tatsuhiro_tsujikawaaria2Match0.15.1\+1

tatsuhiro_tsujikawaaria2Match0.15.1\+2

tatsuhiro_tsujikawaaria2Match0.15.2

tatsuhiro_tsujikawaaria2Match0.15.3

tatsuhiro_tsujikawaaria2Match0.16.0

tatsuhiro_tsujikawaaria2Match0.16.1

tatsuhiro_tsujikawaaria2Match0.16.2

tatsuhiro_tsujikawaaria2Match1.0.0

tatsuhiro_tsujikawaaria2Match1.1.1

tatsuhiro_tsujikawaaria2Match1.1.2

tatsuhiro_tsujikawaaria2Match1.2.0

tatsuhiro_tsujikawaaria2Match1.3.0

tatsuhiro_tsujikawaaria2Match1.3.1

tatsuhiro_tsujikawaaria2Match1.3.2

tatsuhiro_tsujikawaaria2Match1.3.3

tatsuhiro_tsujikawaaria2Match1.4.0

tatsuhiro_tsujikawaaria2Match1.4.1

tatsuhiro_tsujikawaaria2Match1.5.0

tatsuhiro_tsujikawaaria2Match1.5.1

tatsuhiro_tsujikawaaria2Match1.5.2

tatsuhiro_tsujikawaaria2Match1.6.0

CPENameOperatorVersion
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2le1.6.1
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2eq0.11.3
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2eq0.11.4
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2eq0.11.5
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2eq0.12.0
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2eq0.12.1
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2eq0.13.0
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2eq0.13.0+1
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2eq0.13.1
tatsuhiro_tsujikawa:aria2tatsuhiro tsujikawa aria2eq0.13.1+1

CPE	Name	Operator	Version
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	le	1.6.1
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	eq	0.11.3
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	eq	0.11.4
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	eq	0.11.5
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	eq	0.12.0
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	eq	0.12.1
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	eq	0.13.0
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	eq	0.13.0+1
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	eq	0.13.1
tatsuhiro_tsujikawa:aria2	tatsuhiro tsujikawa aria2	eq	0.13.1+1