Vulnerability Description
Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Transmissionbt | Transmission | < 1.92 |
| Linux | Linux Kernel | - |
| Debian | Debian Linux | 8.0 |
Related Weaknesses (CWE)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0748Issue TrackingPatchThird Party Advisory
- https://github.com/transmission/transmission/wiki/Release-Notes#transmission-192Release NotesThird Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2010-0748Third Party Advisory
- https://trac.transmissionbt.com/ticket/2965ExploitIssue TrackingVendor Advisory
- https://www.openwall.com/lists/oss-security/2010/04/01/9Mailing ListPatchThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0748Issue TrackingPatchThird Party Advisory
- https://github.com/transmission/transmission/wiki/Release-Notes#transmission-192Release NotesThird Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2010-0748Third Party Advisory
- https://trac.transmissionbt.com/ticket/2965ExploitIssue TrackingVendor Advisory
- https://www.openwall.com/lists/oss-security/2010/04/01/9Mailing ListPatchThird Party Advisory
FAQ
What is CVE-2010-0748?
CVE-2010-0748 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
How severe is CVE-2010-0748?
CVE-2010-0748 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2010-0748?
Check the references section above for vendor advisories and patch information. Affected products include: Transmissionbt Transmission, Linux Linux Kernel, Debian Debian Linux.