NVD

Id
32802  
Name
CVE-2014-4909  
Description
Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-07-29  
Modified Date
2014-11-13  
Seq
2014-4909  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172342 32802 CVE-2014-4909 http://inertiawar.com/submission.go  View
172343 32802 CVE-2014-4909 FEDORA-2014-8331  View
172344 32802 CVE-2014-4909 openSUSE-SU-2014:0980  View
172345 32802 CVE-2014-4909 DSA-2988  View
172346 32802 CVE-2014-4909 [oss-security] 20140710 CVE request: transmission peer communication vulnerability  View
172347 32802 CVE-2014-4909 [oss-security] 20140711 Re: CVE request: transmission peer communication vulnerability  View
172348 32802 CVE-2014-4909 68487  View
172349 32802 CVE-2014-4909 USN-2279-1  View
172350 32802 CVE-2014-4909 https://bugs.gentoo.org/show_bug.cgi?id=516822  View
172351 32802 CVE-2014-4909 https://bugzilla.redhat.com/show_bug.cgi?id=1118290  View
172352 32802 CVE-2014-4909 https://trac.transmissionbt.com/wiki/Changes#version-2.84  View
172353 32802 CVE-2014-4909 https://twitter.com/benhawkes/statuses/484378151959539712  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14756 JVNDB-2014-003631 Transmission の bitfield.c 内の tr_bitfieldEnsureNthBitAlloced 関数における整数オーバーフローの脆弱性 Transmission の bitfield.c 内の tr_bitfieldEnsureNthBitAlloced 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2014-4909 72198 CVE-2014-4909 32802 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003631.html 2014-07-01 2014-07-31 View