CVE-2010-0748

Name	CVE-2010-0748
Description	Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severity	high
Debian Bugs	574507

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
transmission (PTS)	stretch (security), stretch	2.92-2+deb9u1	fixed
	buster	2.94-2	fixed
	bullseye, sid	3.00-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
transmission	source	(unstable)	1.92-1	medium		574507
transmission	source	lenny	(not affected)

[lenny] - transmission <not-affected> (Support for Magnet links not yet available)