The bdecode function in bdecode.cpp in libtorren allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file. Upstream issue: https://github.com/arvidn/libtorrent/issues/2099 Upstream patch: https://github.com/arvidn/libtorrent/commit/ec30a5e9ec703afb8abefba757c6d401303b53db
Created rb_libtorrent tracking bugs for this issue: Affects: epel-7 [bug 1466433] Affects: fedora-all [bug 1466432]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.