The parsechunkheader function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP broadcast.
{
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libtorrent-rasterbar-dev",
"binary_version": "0.16.13-1ubuntu2.1+esm1"
},
{
"binary_name": "libtorrent-rasterbar7",
"binary_version": "0.16.13-1ubuntu2.1+esm1"
},
{
"binary_name": "python-libtorrent",
"binary_version": "0.16.13-1ubuntu2.1+esm1"
},
{
"binary_name": "python3-libtorrent",
"binary_version": "0.16.13-1ubuntu2.1+esm1"
}
]
}
{
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libtorrent-rasterbar-dev",
"binary_version": "1.0.7-1ubuntu0.1~esm1"
},
{
"binary_name": "libtorrent-rasterbar8",
"binary_version": "1.0.7-1ubuntu0.1~esm1"
},
{
"binary_name": "python-libtorrent",
"binary_version": "1.0.7-1ubuntu0.1~esm1"
},
{
"binary_name": "python3-libtorrent",
"binary_version": "1.0.7-1ubuntu0.1~esm1"
}
]
}