Denial of Service Vulnerability in Transmission by Transmission Project
CVE-2010-0748

9.8CRITICAL

Key Information:

Vendor

Transmission

Status
Transmission
Vendor
CVE Published:
30 October 2019

What is CVE-2010-0748?

A vulnerability in Transmission versions prior to 1.92 allows attackers to trigger a denial of service condition by sending a large number of tr arguments within a magnet link. This could lead to potential crashes or other unspecified impacts on the affected system. Users are advised to upgrade to the latest version to mitigate this risk.

Affected Version(s)

transmission before 1.92

References

https://security-tracker.debian.org/tracker/CVE-2010-0748
x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0748
x_refsource_MISC
https://trac.transmissionbt.com/ticket/2965
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.