Security
Security
A vulnerability in Transmission could allow a remote attacker to execute arbitrary RPC commands.
| Package | net-p2p/transmission on all architectures |
|---|---|
| Affected versions | < 2.93 |
| Unaffected versions | >= 2.93 |
Transmission is a cross-platform BitTorrent client.
A vulnerability was discovered in how Transmission handles access control through the X-Transmission-Session-Id.
A remote attacker could execute arbitrary RFC commands or consequently conduct a DNS rebinding attack.
There is no known workaround at this time.
All Transmission users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-p2p/transmission-"
Release date
June 20, 2018
Latest revision
June 20, 2018: 1
Severity
normal
Exploitable
remote
Bugzilla entries