CVE-2012-6129

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-04-03 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted "micro transport protocol packets."

Affected products

Canonical Ubuntu Linux: 11.10, 12.04, 12.10
Fedoraproject Fedora: 16
Transmissionbt Transmission: through 2.73; 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 (+85)

References

http://lists.opensuse.org/opensuse-updates/2013-03/msg00064.html
http://www.openwall.com/lists/oss-security/2013/02/13/1
http://www.ubuntu.com/usn/USN-1747-1
https://bugzilla.redhat.com/show_bug.cgi?id=909934
https://trac.transmissionbt.com/changeset/13646
https://trac.transmissionbt.com/ticket/5002
http://lists.opensuse.org/opensuse-updates/2013-03/msg00064.html
http://www.openwall.com/lists/oss-security/2013/02/13/1
http://www.ubuntu.com/usn/USN-1747-1
https://bugzilla.redhat.com/show_bug.cgi?id=909934
https://trac.transmissionbt.com/changeset/13646
https://trac.transmissionbt.com/ticket/5002

Get alerted when CVE-2012-6129 or the next vulnerability affects your stack