transmission

transmission

Python Package Index

Releases1

Last Releaseover 10 years ago

Transmission is a utility package that houses decorators and signals pertaining to state transitions and generalized events

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2018-10756NVD↗	< 3.00	May 15, 2020Friday, 15 May 2020, 16:15	7.8 HIGH	6.8 MEDIUM
Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.
CVE-2010-0748NVD↗	< 1.92	Oct 30, 2019Wednesday, 30 October 2019, 23:15	9.8 CRITICAL	7.5 HIGH
Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
CVE-2010-0749NVD↗	< 1.92	Oct 30, 2019Wednesday, 30 October 2019, 23:15	5.3 MEDIUM	5 MEDIUM
Transmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame.
CVE-2018-5702NVD↗	<= 2.92	Jan 15, 2018Monday, 15 January 2018, 16:29	—	6.8 MEDIUM
Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.