libtorrent-rasterbar: denial of service
| Package(s): | libtorrent-rasterbar | CVE #(s): | CVE-2016-5301 | ||||||||||||||||||||
| Created: | June 13, 2016 | Updated: | September 12, 2016 | ||||||||||||||||||||
| Description: | From the Debian LTS advisory:
A specially crafted HTTP response from a tracker (or potentially a UPnP broadcast) can crash libtorrent in the parse_chunk_header() function. Although this function is not present in this version, upstream's additional sanity checks were added to abort the program if necessary instead of crashing it. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||