Bittorrent
9 CVEs across 4 Bittorrent products. Browse Bittorrent vulnerabilities, severities, and proof-of-concept exploits.
Bittorrent products with known CVEs
Bittorrent CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2018-25044 | Medium | 6.3 | 2022-06-17 | A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component Guest Account. The m… |
CVE-2018-25043 | Medium | 5.0 | 2022-06-17 | A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak aut… |
CVE-2018-25042 | Medium | 5.0 | 2022-06-17 | A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to… |
CVE-2020-8437 | High | 7.5 | 2020-03-02 | The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denia… |
CVE-2015-5685 | | | 2015-08-13 | The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related t… |
CVE-2015-5474 | | | 2015-08-13 | BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (… |
CVE-2015-2846 | | | 2015-04-13 | BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link. |
CVE-2014-8515 | | | 2014-12-12 | The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to po… |
CVE-2014-8509 | | | 2014-10-31 | The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) allows remote attackers to execute arbitrary code via a crafted packet, which triggers an… |
CVE-2008-7166 | | | 2009-09-04 | Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to caus… |
CVE-2008-4434 | | | 2008-10-03 | Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a den… |
CVE-2008-0071 | | | 2008-06-16 | The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service… |
CVE-2008-0364 | | | 2008-01-18 | Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; on Windows allows re… |