Rasterbar Software Libtorrent vulnerabilities

2 known vulnerabilities affecting rasterbar_software/libtorrent.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2009-1760MEDIUMCVSS 5.8≤ 0.14.3v0+2 more2009-06-11

CVE-2009-1760 [MEDIUM] CWE-22 CVE-2009-1760: Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as Directory traversal vulnerability in src/torrent_info.cpp in Rasterbar libtorrent before 0.14.4, as used in firetorrent, qBittorrent, deluge Torrent, and other applications, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) and partial relative pathname in a Multiple File Mode list element in a .torrent file.

CVE-2008-0646HIGHCVSS 7.8≤ 0.122008-02-07

CVE-2008-0646 [HIGH] CWE-119 CVE-2008-0646: The bdecode_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent be The bdecode_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0.5.8.3 and other products, allows context-dependent attackers to cause a denial of service (stack exhaustion and crash) via a crafted bencoded message.