CVE-2017-9847

Name of the Vulnerable Software and Affected Versions libtorrent version 1.1.3

Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. This is due to a problem in the bdecode function in bdecode.cpp.

Recommendations For libtorrent version 1.1.3, consider updating to a newer version that contains a fix for this issue, as the current version is affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.