Advisories · Technology
SANKO Net::BitTorrent.
Every CVE that names SANKO Net::BitTorrent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
Net::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG
- SANKO Net::BitTorrent
- Weak cryptography or TLS
- CVSS 7.5 High
Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input
- SANKO Net::BitTorrent
- Denial of service
- CVSS 7.5 High
Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via an uncapped peer-wire message-length prefix
- SANKO Net::BitTorrent
- Denial of service
- CVSS 5.3 Medium
Net::BitTorrent versions before 2.1.0 for Perl write files outside the download directory via path traversal in peer-supplied metadata
- SANKO Net::BitTorrent
- Path traversal