Upstream information

CVE-2014-4909 at MITRE

Description

Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having moderate severity.

CVSS v2 Scores
CVSS detail National Vulnerability Database
Base Score 6.8
Vector AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
SUSE Bugzilla entry: 887079 [RESOLVED / FIXED]

SUSE Security Advisories:

    openSUSE-SU-2014:0980-1

List of released packages

Product(s) Fixed package version(s) References
openSUSE Leap 15.0
  • transmission-common >= 2.94-lp150.1.1
  • transmission-gtk >= 2.94-lp150.1.1
  • transmission-gtk-lang >= 2.94-lp150.1.1
 Patchnames:
openSUSE Leap 15.0 GA transmission-common-2.94-lp150.1.1
openSUSE Tumbleweed
  • transmission >= 2.92-3.1
  • transmission-common >= 2.92-3.1
  • transmission-daemon >= 2.92-3.1
  • transmission-gtk >= 2.92-3.1
  • transmission-gtk-lang >= 2.92-3.1
  • transmission-qt >= 2.92-3.1
  • transmission-qt-lang >= 2.92-3.1
 Patchnames:
openSUSE-Tumbleweed-2024-10272

SUSE Timeline for this CVE

CVE page created: Mon Jul 14 11:16:27 2014
CVE page last modified: Sat Nov 1 20:10:31 2025