CVE-2010-0748: Input Validation
Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2010-0748?
CVE-2010-0748 is a vulnerability in Transmission before version 1.92 that allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
What is the severity of CVE-2010-0748?
CVE-2010-0748 has a severity of 9.8 (critical).
Which software versions are affected by CVE-2010-0748?
CVE-2010-0748 affects Transmission versions up to and excluding 1.92.
How can I fix CVE-2010-0748 on Debian Linux?
To fix CVE-2010-0748 on Debian Linux, update the transmission package to one of the following versions: 2.94-2+deb10u2, 3.00-1, 3.00-2.1+deb12u1, or 4.0.2-1.
Where can I find more information about CVE-2010-0748?
You can find more information about CVE-2010-0748 at the following references: [1] https://trac.transmissionbt.com/ticket/2965, [2] https://github.com/transmission/transmission/wiki/Release-Notes#transmission-192-20100314, [3] https://security-tracker.debian.org/tracker/CVE-2010-0748.