Skip to main content

Vendor archive

bittorrent CVEs

Beta · best-effort

13 CVEs tagged to vendor bittorrent3 Critical, 3 High, 7 Medium, 0 Low, 0 Unrated.

CVE-2018-25044

Published Jun 17, 2022

A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component Guest Account. The manipulation leads to…

CVSS 6.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2018-25043

Published Jun 17, 2022

A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The att…

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2018-25042

Published Jun 17, 2022

A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack…

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2020-8437

Published Mar 2, 2020

The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service.

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2015-5685

Published Aug 13, 2015

The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2015-5474

Published Aug 13, 2015

BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.

CVSS 9.3 · Critical
Vendor/product tagsBeta · best-effort

CVE-2015-2846

Published Apr 13, 2015

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link.

CVSS 9.3 · Critical
evidence mentions
2
Buzz score
17.5
Vendor/product tagsBeta · best-effort

CVE-2014-8515

Published Dec 12, 2014

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000.

CVSS 6.8 · Medium
Vendor/product tagsBeta · best-effort

CVE-2014-8509

Published Oct 31, 2014

The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) allows remote attackers to execute arbitrary code via a crafted packet, which triggers an out-of-bounds read,…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2008-7166

Published Sep 4, 2009

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of servic…

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2008-4434

Published Oct 3, 2008

Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (cras…

CVSS 9.3 · Critical
Vendor/product tagsBeta · best-effort

CVE-2008-0071

Published Jun 16, 2008

The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash)…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2008-0364

Published Jan 18, 2008

Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; on Windows allows remote attackers to ca…

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-13 of 13 CVEsPage 1 of 1