CVE-2015-5685 — Vulnetix

CVE-2015-5685 PUBLISHED

The lazy_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafted packet, related to "improper indexing."

EPSS 6.61% · 91.4th percentile

Risk Scores

EPSS Score

6.61%

91.4th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:Pro:14.04:LTS	libtorrent-rasterbar	*, 0, 0.16.11-1ubuntu1

Exploit Intelligence

http://www.zerodayinitiative.com/advisories/ZDI-15-366/ (circl)
https://github.com/bittorrent/bootstrap-dht/commit/e809ea80e3527e32c40756eddd8b2ae44bc3af1a (circl)
http://www.zerodayinitiative.com/advisories/ZDI-15-367/ (circl)

Timeline

Aug 13, 2015 CVE Published
Feb 4, 2022 EPSS Score
May 20, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Mar 31, 2023 EPSS Score
May 3, 2023 EPSS Score
May 25, 2023 EPSS Score
Sep 7, 2023 EPSS Score
Oct 11, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2015-5685 third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2015-5685 third-party-advisory

Open in Interactive Console →