The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.0.7-1build1", "binary_name": "libtorrent-rasterbar-dbg" }, { "binary_version": "1.0.7-1build1", "binary_name": "libtorrent-rasterbar-dev" }, { "binary_version": "1.0.7-1build1", "binary_name": "libtorrent-rasterbar-dev-dbgsym" }, { "binary_version": "1.0.7-1build1", "binary_name": "libtorrent-rasterbar-doc" }, { "binary_version": "1.0.7-1build1", "binary_name": "libtorrent-rasterbar8" }, { "binary_version": "1.0.7-1build1", "binary_name": "libtorrent-rasterbar8-dbgsym" }, { "binary_version": "1.0.7-1build1", "binary_name": "python-libtorrent" }, { "binary_version": "1.0.7-1build1", "binary_name": "python-libtorrent-dbg" }, { "binary_version": "1.0.7-1build1", "binary_name": "python3-libtorrent" }, { "binary_version": "1.0.7-1build1", "binary_name": "python3-libtorrent-dbg" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "1.1.5-1build1", "binary_name": "libtorrent-rasterbar-dbg" }, { "binary_version": "1.1.5-1build1", "binary_name": "libtorrent-rasterbar-dev" }, { "binary_version": "1.1.5-1build1", "binary_name": "libtorrent-rasterbar-doc" }, { "binary_version": "1.1.5-1build1", "binary_name": "libtorrent-rasterbar9" }, { "binary_version": "1.1.5-1build1", "binary_name": "python-libtorrent" }, { "binary_version": "1.1.5-1build1", "binary_name": "python-libtorrent-dbg" }, { "binary_version": "1.1.5-1build1", "binary_name": "python3-libtorrent" }, { "binary_version": "1.1.5-1build1", "binary_name": "python3-libtorrent-dbg" } ] }