|
|
Subscribe / Log in / New account

aria2: denial of service

Package(s):aria2 CVE #(s):CVE-2009-3617
Created:January 14, 2010 Updated:January 20, 2010
Description: From the CVE entry:

Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI. NOTE: some of these details are obtained from third party information.

Alerts:
Gentoo 201001-06 aria2 2010-01-13

to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds