6.8

CVE-2014-4909: canonical ubuntu_linux Numeric Errors

CVSS: 6.8v2.0MediumModified
AliasesMGASA-2014-0298UBUNTU-CVE-2014-4909USN-2279-1
Published 29-07-2014Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2014-4909 is a medium (CVSS 6.8) Numeric Errors vulnerability in canonical ubuntu_linux. EPSS estimates a 5.41% chance of exploitation in the next 30 days, higher than 92.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
38/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.8/10
010
Medium · v2.0 (NVD)
EPSS score
5.41%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Timeline

  1. 29-07-2014
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted peer message, which triggers an out-of-bounds write.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

5.41%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.41% on 21-09-2026

21-09-202621-10-2026
EPSS score
5.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (inertiawar.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Mageia2 products
  • transmission< 2.77-1.1.mga3
  • transmission< 2.82-2.1.mga4
Canonical1 product
Debian1 product
  • transmission< 2.52-3+nmu2 | < 2.84-0.1
Fedoraproject1 product
Opensuse1 product
  • transmission&distro=openSUSE Tumbleweed< 2.92-3.1
Transmissionbt1 product
  • transmission≤ 2.83 | 0.1 | 0.2 | 0.3 | 0.4 | 0.5 | 0.6 | 0.6.1 | 0.70 | 0.71 | 0.72 | 0.80 | 0.81 | 0.82 | 0.90 | 0.91 | 0.92 | 0.93 | 0.94 | 0.95 | 0.96 | 1.00 | 1.01 | 1.02 | 1.2 | 1.03 | 1.04 | 1.05 | 1.06 | 1.10 | 1.11 | 1.20 | 1.21 | 1.22 | 1.30 | 1.31 | 1.32 | 1.33 | 1.34 | 1.40 | 1.41 | 1.42 | 1.50 | 1.51 | 1.52 | 1.53 | 1.54 | 1.60 | 1.61 | 1.70 | 1.71 | 1.72 | 1.73 | 1.74 | 1.75 | 1.76 | 1.77 | 1.80 | 1.81 | 1.82 | 1.83 | 1.90 | 1.91 | 1.92 | 1.93 | 2.00 | 2.01 | 2.02 | 2.03 | 2.04 | 2.10 | 2.11 | 2.12 | 2.13 | 2.20 | 2.21 | 2.22 | 2.30 | 2.31 | 2.32 | 2.33 | 2.40 | 2.41 | 2.42 | 2.50 | 2.51 | 2.52 | 2.60 | 2.61 | 2.70 | 2.71 | 2.72 | 2.73 | 2.74 | 2.75 | 2.76 | 2.77 | 2.80 | 2.81 | 2.82
Ubuntu1 product
  • transmission< 2.82-1.1ubuntu3.1

7 vendors · 8 products

References

24 links
Show all 24 references