Back to Database
Status published
Medium
CVE-2014-4909
Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission...
Vulnerability Description
Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-4909
Credits & Attribution
No credits recorded in the NVD database.
References
- http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135539.html
- https://trac.transmissionbt.com/wiki/Changes#version-2.84
- http://www.openwall.com/lists/oss-security/2014/07/10/4
- http://www.securityfocus.com/bid/68487
- https://bugs.gentoo.org/show_bug.cgi?id=516822
- http://www.openwall.com/lists/oss-security/2014/07/11/5
- http://secunia.com/advisories/60108
- http://secunia.com/advisories/60527
- http://secunia.com/advisories/59897
- http://www.debian.org/security/2014/dsa-2988
- http://inertiawar.com/submission.go
- http://www.ubuntu.com/usn/USN-2279-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1118290
- https://twitter.com/benhawkes/statuses/484378151959539712
- http://lists.opensuse.org/opensuse-updates/2014-08/msg00011.html
- http://www.osvdb.org/108997
More from canonical
View All →CVE-2025-31479
canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output
High
8.2
CVE-2025-24375
MySQL K8s charm could leak credentials for root-level user `serverconfig`
Medium
5
CVE-2024-41129
The ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command
Medium
4.4
CVE-2020-8632
In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small...
Medium
5.5
CVE-2020-8631
cloud-init through 19.4 relies on Mersenne Twister for a random...
Medium
5.5
Affected Vendor
canonical
View all reports →Affected Software
ubuntu linux, fedora, linux, transmission
Vulnerable Versions:
12.04, 13.10, 14.04, 20, 0, 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.6.1, 0.70, 0.71, 0.72, 0.80, 0.81, 0.82, 0.90, 0.91, 0.92, 0.93, 0.94, 0.95, 0.96, 1.00, 1.01, 1.02, 1.2, 1.03, 1.04, 1.05, 1.06, 1.10, 1.11, 1.20, 1.21, 1.22, 1.30, 1.31, 1.32, 1.33, 1.34, 1.40, 1.41, 1.42, 1.50, 1.51, 1.52, 1.53, 1.54, 1.60, 1.61, 1.70, 1.71, 1.72, 1.73, 1.74, 1.75, 1.76, 1.77, 1.80, 1.81, 1.82, 1.83, 1.90, 1.91, 1.92, 1.93, 2.00, 2.01, 2.02, 2.03, 2.04, 2.10, 2.11, 2.12, 2.13, 2.20, 2.21, 2.22, 2.30, 2.31, 2.32, 2.33, 2.40, 2.41, 2.42, 2.50, 2.51, 2.52, 2.60, 2.61, 2.70, 2.71, 2.72, 2.73, 2.74, 2.75, 2.76, 2.77, 2.80, 2.81, 2.82
Timeline
Official Publish:
July 29th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.