The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP broadcast.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "libtorrent-rasterbar-dbg", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "libtorrent-rasterbar-dev", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "libtorrent-rasterbar-dev-dbgsym", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "libtorrent-rasterbar-doc", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "libtorrent-rasterbar7", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "libtorrent-rasterbar7-dbgsym", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "python-libtorrent", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "python-libtorrent-dbg", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "python-libtorrent-dbgsym", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "python3-libtorrent", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "python3-libtorrent-dbg", "binary_version": "0.16.13-1ubuntu2.1+esm1" }, { "binary_name": "python3-libtorrent-dbgsym", "binary_version": "0.16.13-1ubuntu2.1+esm1" } ], "ubuntu_priority": "medium" }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_name": "libtorrent-rasterbar-dbg", "binary_version": "1.0.7-1ubuntu0.1~esm1" }, { "binary_name": "libtorrent-rasterbar-dev", "binary_version": "1.0.7-1ubuntu0.1~esm1" }, { "binary_name": "libtorrent-rasterbar-dev-dbgsym", "binary_version": "1.0.7-1ubuntu0.1~esm1" }, { "binary_name": "libtorrent-rasterbar-doc", "binary_version": "1.0.7-1ubuntu0.1~esm1" }, { "binary_name": "libtorrent-rasterbar8", "binary_version": "1.0.7-1ubuntu0.1~esm1" }, { "binary_name": "libtorrent-rasterbar8-dbgsym", "binary_version": "1.0.7-1ubuntu0.1~esm1" }, { "binary_name": "python-libtorrent", "binary_version": "1.0.7-1ubuntu0.1~esm1" }, { "binary_name": "python-libtorrent-dbg", "binary_version": "1.0.7-1ubuntu0.1~esm1" }, { "binary_name": "python3-libtorrent", "binary_version": "1.0.7-1ubuntu0.1~esm1" }, { "binary_name": "python3-libtorrent-dbg", "binary_version": "1.0.7-1ubuntu0.1~esm1" } ], "ubuntu_priority": "medium" }