Bittorrent

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Bittorrent records in CISA KEV

No Bittorrent vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bittorrent 6 records MEDIUM Utorrent 4 records HIGH Bootstrap-dht 2 records MEDIUM Sync 1 record MEDIUM

Records

13 records

TI-2018-15271 CVE-2018-25044 · GHSA-67wg-rf9j-w59j

uTorrent Guest Account privileges management

HIGH 71

A vulnerability, which was classified as critical, has been found in uTorrent.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00994 Published 2022-06-17 No fix listed CWE-269

TI-2018-15270 CVE-2018-25043 · GHSA-45qr-3x63-9j8c

uTorrent PRNG improper authentication

HIGH 71

A vulnerability classified as critical was found in uTorrent.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01177 Published 2022-06-17 No fix listed CWE-287

TI-2018-15269 CVE-2018-25042 · GHSA-3mj9-p2pr-gqr4

uTorrent memory corruption

HIGH 71

A vulnerability classified as critical has been found in uTorrent.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01015 Published 2022-06-17 No fix listed CWE-119

TI-2008-04228 CVE-2008-4434 · GHSA-gpw2-8gvp-j3p3

Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2)…

MEDIUM 53

Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.10966 Published 2008-10-03 No fix listed CWE-119

TI-2020-06774 CVE-2020-8437 · GHSA-f77w-22mg-cg9g

The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested…

MEDIUM 47

The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12042 Published 2020-03-02 No fix listed CWE-476

TI-2015-04608 CVE-2015-5474 · GHSA-3749-7fcp-r85v

BitTorrent and uTorrent allow remote attackers to inject command line parameters and…

MEDIUM 47

BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (1) bittorrent or (2) magnet protocol.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03808 Published 2015-08-13 No fix listed CWE-77

TI-2015-02511 CVE-2015-2846 · GHSA-c8h4-qpcx-5g8g

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link.

MEDIUM 46

BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03625 Published 2015-04-13 No fix listed CWE-77

TI-2015-04791 CVE-2015-5685 · GHSA-2472-r3qx-5cf2

The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows…

MEDIUM 41

The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05511 Published 2015-08-13 No fix listed CWE-20

TI-2014-06985 CVE-2014-8509 · GHSA-g4qx-mx3q-4q2c

The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) allows remote…

MEDIUM 41

The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) allows remote attackers to execute arbitrary code via a crafted packet, which triggers an out-of-bounds read, related to "Improper Indexing."

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05125 Published 2014-10-31 No fix listed CWE-119

TI-2014-06991 CVE-2014-8515 · GHSA-3hjh-72vp-2mx6

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by…

LOW 35

The web interface in BitTorrent allows remote attackers to execute arbitrary commands by leveraging knowledge of the pairing values and a crafted request to port 10000.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0241 Published 2014-12-12 No fix listed CWE-77

TI-2008-00339 CVE-2008-0364 · GHSA-q395-g9g3-9q27

Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier…

LOW 34

Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; on Windows allows remote attackers to cause a denial of service (application cras…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08892 Published 2008-01-18 No fix listed CWE-119

TI-2008-00062 CVE-2008-0071 · GHSA-2crc-x37f-94vp

The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before…

LOW 30

The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Ran…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0719 Published 2008-06-16 No fix listed CWE-20

TI-2008-06854 CVE-2008-7166 · GHSA-xw3m-wfv2-qhh9

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and…

LOW 28

Buffer overflow in the web interface in BitTorrent 6.0.1 (build 7859) and earlier, and uTorrent 1.7.6 (build 7859) and earlier, allows remote attackers to cause a denial of service (memory consumption and crash) via a cr…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02849 Published 2009-09-04 No fix listed CWE-119

Open these records in search →

Critical	3
High	6
Medium	4
Low	0
No CVSS	0