The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and crash) via a crafted GZIP response.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
https://github.com/arvidn/libtorrent/pull/1022 | issue tracking third party advisory patch |
http://www.openwall.com/lists/oss-security/2016/09/08/7 | mailing list third party advisory patch |
https://github.com/arvidn/libtorrent/issues/1021 | issue tracking third party advisory patch |
http://www.openwall.com/lists/oss-security/2016/09/08/1 | mailing list third party advisory patch |
http://www.securityfocus.com/bid/92891 | vdb entry third party advisory |