CVE-2015-5685 | BDVDB-2026-70918 Detail

Description#

The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zerodayinitiative.com/advisories/ZDI-15-366/
https://github.com/bittorrent/bootstrap-dht/commit/e809ea80e3527e32c40756eddd8b2ae44bc3af1a
http://www.zerodayinitiative.com/advisories/ZDI-15-367/

Exploit#

No public exploit known

History#

Version 12015-08-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.