CVE-2016-7164

High

Published: 07/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and crash) via a crafted GZIP response.

Risk Assessment

An attacker can exploit this vulnerability to remotely disrupt service, potentially leading to downtime for applications using Libtorrent.

Recommendation

It is recommended to update Libtorrent to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Other vulnerabilities in Libtorrent 1.1.0

CVE-2016-5301High
The parse_chunk_header function in libtorrent before version 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted HTTP response or possibly a UPnP broadcast.

Original NVD description (English source)

The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service (segmentation fault and crash) via a crafted GZIP response.