The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP broadcast.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4790-1 advisory.

    It was discovered that libtorrent incorrectly handled chunked headers. A remote attacker could possibly     use this to cause a crash resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for libtorrent-rasterbar fixes the following issues :

  - Update to version 1.0.10 :

  - Fix inverted priority of incoming piece suggestions.

  - Fix a crash on invalid input in http_parser.

  - Add a new 'preformatted' type to bencode entry variant     type.

  - Fix division by zero in super-seeding logic

Brandon Perry reports :

The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP broadcast.

This update for libtorrent-rasterbar fixes the following issues :

  - CVE-2016-5301: Crash on invalid input in http_parser     could have allowed a remote attacker to perform a denial     of service attack (boo#983228).

    In addition, the package was updated to 1.0.9 / 1.16.19,     fixing various upstream bugs.

This update for libtorrent-rasterbar fixes the following issues :

  - CVE-2016-5301: Crash on invalid input in http_parser     could have allowed a remote attacker to perform a denial     of service attack (boo#983228).

In addition, the package was updated to 1.0.9 / 1.16.19, fixing various upstream bugs.

A specially crafted HTTP response from a tracker (or potentially a UPnP broadcast) can crash libtorrent in the parse_chunk_header() function. Although this function is not present in this version, upstream's additional sanity checks were added to abort the program if necessary instead of crashing it.

For Debian 7 'Wheezy', these problems have been fixed in version 0.15.10-1+deb7u1.

We recommend that you upgrade your libtorrent-rasterbar packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183532	Ubuntu 16.04 ESM : libtorrent vulnerability (USN-4790-1)	Nessus	Ubuntu Local Security Checks	high
93444	openSUSE Security Update : libtorrent-rasterbar (openSUSE-2016-1074)	Nessus	SuSE Local Security Checks	high
91908	FreeBSD : libtorrent-rasterbar -- denial of service (093584f2-3f14-11e6-b3c8-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	high
91849	openSUSE Security Update : libtorrent-rasterbar (openSUSE-2016-774)	Nessus	SuSE Local Security Checks	high
91722	openSUSE Security Update : libtorrent-rasterbar (openSUSE-2016-751)	Nessus	SuSE Local Security Checks	high
91575	Debian DLA-511-1 : libtorrent-rasterbar security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2016-5301

high

Tenable Plugins

high

high

high

high

high

high