Security Update for libtorrent-rasterbar
Summary
DLA-511-1: libtorrent-rasterbar - security update. Affects libtorrent-rasterbar versions < 0.15.10-1+deb7u1. Fixed in 0.15.10-1+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
libtorrent-rasterbar is a C++ library that provides a high-performance implementation of the BitTorrent protocol. It is widely used in various BitTorrent clients and applications. This vulnerability affects version 0.15.10-1+deb7u1 of the package in Debian 7 Wheezy.
Vulnerability Detail
A specially crafted HTTP response from a tracker or a UPnP broadcast can trigger a crash in libtorrent-rasterbar's parse_chunk_header() function. Although this function is not present in the affected version, upstream's additional sanity checks were added to abort the program instead of crashing it. This vulnerability can potentially lead to denial of service (DoS) attacks against applications utilizing libtorrent-rasterbar.
How To Fix
Minimum fixed version
0.15.10-1+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libtorrent-rasterbarTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The libtorrent-rasterbar package in Debian 7 Wheezy is vulnerable to a denial of service (DoS) attack. To mitigate this vulnerability, it is recommended to upgrade the package to version 0.15.10-1+deb7u1 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libtorrent-rasterbar →
FAQ
libtorrent-rasterbar is a C++ library implementing the BitTorrent protocol, commonly used in BitTorrent clients and applications.
This vulnerability can lead to a denial of service (DoS) attack against applications utilizing libtorrent-rasterbar.
The vulnerability affects version 0.15.10-1+deb7u1 of libtorrent-rasterbar in Debian 7 Wheezy.
To fix this vulnerability, upgrade the libtorrent-rasterbar package to version 0.15.10-1+deb7u1 or later.
No specific workaround has been provided for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for libtorrent-rasterbar.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
