CVE-2020-8437

Description

The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service.

References

https://github.com/mavlevin/uTorrent-CVE-2020-8437

https://github.com/guywhataguy/uTorrent-CVE-2020-8437

https://utclient.utorrent.com/offers/beta_release_notes/release_notes.html

https://twitter.com/va_start

https://forum.utorrent.com/forum/13-announcements/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29304

https://blog.whtaguy.com/2020/09/utorrent-cve-2020-8437-vulnerability.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS