Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted "micro transport protocol packets."
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade transmission | Jul 30, 2024 | Apr 3, 2013 |
| Freebsd | — | Upgrade transmission-qt4Upgrade transmission-gtkUpgrade transmission-cliUpgrade transmission-deamonUpgrade bittorrent-libutp | Dec 10, 2025 | Dec 29, 2014 |
| Suse | — | Upgrade transmission-qtUpgrade transmission-qt-debuginfoUpgrade transmissionUpgrade transmission-gtk-langUpgrade transmission-gtk-debuginfoUpgrade transmission-commonUpgrade transmission-gtkUpgrade transmission-debugsourceUpgrade transmission-debuginfo | Dec 12, 2013 | Apr 2, 2013 |
| Ubuntu | — | Upgrade transmission-common | Nov 8, 2024 | Apr 3, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub