CVE-2010-0748

Name	CVE-2010-0748
Description	Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severity	high
Debian Bugs	574507

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
transmission (PTS)	stretch	2.92-2+deb9u1	fixed
	stretch (security)	2.92-2+deb9u2	fixed
	buster	2.94-2+deb10u2	fixed
	bookworm, bullseye, sid	3.00-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
transmission	source	lenny	(not affected)
transmission	source	(unstable)	1.92-1	medium		574507

[lenny] - transmission <not-affected> (Support for Magnet links not yet available)