CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
Percentile
93.1%
Multiple stack-based buffer overflows in the tr_magnetParse function in
libtransmission/magnet.c in Transmission 1.91 allow remote attackers to
cause a denial of service (crash) or possibly execute arbitrary code via a
crafted magnet URL with a large number of (1) tr or (2) ws links.
Author | Note |
---|---|
kees | stack-protector is in use on all releases |