CVE-2012-6129

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted "micro transport protocol packets."

Score

CVSS 2.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2013-04-03

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Ubuntu Linux (Canonical)
• Fedora (Fedoraproject)
• Transmission (Transmissionbt)

References

• http://lists.opensuse.org/opensuse-updates/2013-03/msg00064.html
• http://www.openwall.com/lists/oss-security/2013/02/13/1
• http://www.ubuntu.com/usn/USN-1747-1
• https://bugzilla.redhat.com/show_bug.cgi?id=909934
• https://trac.transmissionbt.com/changeset/13646
• https://trac.transmissionbt.com/ticket/5002