CVE-2016-5301

High

Published: 30/06/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The parse_chunk_header function in libtorrent before version 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted HTTP response or possibly a UPnP broadcast.

Risk Assessment

Attackers can exploit this vulnerability to remotely crash the service, potentially leading to application downtime.

Recommendation

It is recommended to update libtorrent to version 1.1.1 or later to mitigate this vulnerability.

Other vulnerabilities in libtorrent

CVE-2016-7164High
The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and crash) via a crafted GZIP response.

Original NVD description (English source)

The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP broadcast.