Lucene search
Gentoo FoundationMGASA-2015-0428HistoryNov 06, 2015 - 1:46 a.m.
Updated libtorrent-rasterbar packages fixes security vulnerability
2015-11-0601:46:03
Gentoo Foundation
advisories.mageia.org
13
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.736 High
EPSS
Percentile
98.1%
The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to “improper indexing.” Note while this CVE was reported against BitTorrent DHT Bootstrapt server, the same vulnerable code is available in libtorrent-rasterbar (CVE-2015-5685).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 5 | noarch | libtorrent-rasterbar | < 0.16.18-1.1 | libtorrent-rasterbar-0.16.18-1.1.mga5 |
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0428)
2015-11-08 00:00:00
Debian: Security Advisory (DLA-312-1)
2023-03-08 00:00:00
ubuntucve
ubuntucve
CVE-2015-5685
2015-08-13 00:00:00
zdi
zdi
BitTorrent Bootstrap Improper Indexing Remote Code Execution Vulnerability
2015-07-29 00:00:00
BitTorrent Bootstrap Improper Indexing Remote Code Execution Vulnerability
2015-07-29 00:00:00
cvelist
cvelist
CVE-2015-5685
2015-08-13 14:00:00
debian
debian
[SECURITY] [DLA 312-1] libtorrent-rasterbar security update
2015-09-20 16:36:33
nvd
nvd
CVE-2015-5685
2015-08-13 14:59:09
debiancve
debiancve
CVE-2015-5685
2015-08-13 14:59:09
nessus
nessus
Debian DLA-312-1 : libtorrent-rasterbar security update
2015-09-21 00:00:00
osv
osv
libtorrent-rasterbar - security update
2015-09-20 00:00:00
prion
prion
Input validation
2015-08-13 14:59:00
cve
cve
CVE-2015-5685
2015-08-13 14:59:09
rapid7blog
rapid7blog
NICER Protocol Deep Dive: Internet Exposure of HTTP and HTTPS
2021-01-29 14:20:22
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.736 High
EPSS
Percentile
98.1%
Related for MGASA-2015-0428