Use-after-free in Transmission - CVE-2018-10756
Published: May 25, 2020
Vulnerability identifier: #VU28196
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2018-10756
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Transmission Project
Affected software:
Transmission
Transmission
Detailed vulnerability description
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error within the libtransmission/variant.c in Transmission. A remote attacker can create a specially crafted .torrent file, trick the victim into opening it, trigger a use-after-free error and execute arbitrary code on the target system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
How to mitigate CVE-2018-10756
Install update from vendor's website.
Sources
- https://github.com/transmission/transmission/commit/2123adf8e5e1c2b48791f9d22fc8c747e974180e
- https://lists.debian.org/debian-lts-announce/2020/05/msg00022.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OVAG2HNKNRLWOACFN5F2ANJD2SQ53WI7/
- https://tomrichards.net/2020/05/cve-2018-10756-transmission/