CVE-2009-3575

CRITICAL 10.0CVE-2009-3575 · Published 07/10/2009 · updated 16/06/2026

In short

CVE-2009-3575 is a CRITICAL (CVSS 10.0) vulnerability affecting aria2 (tatsuhiro tsujikawa).
Chance of exploitation in the next 30 days (EPSS): 5.8%, higher than 93.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aria2 tatsuhiro_tsujikawa	`= 0.15.3= 1.2.0`	No fix yet

Description

Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

References

secunia.com/advisories/37971
debian.org/security/2009/dsa-1957
mandriva.com/security/advisories
securityfocus.com/bid/36332
qa.mandriva.com/show_bug.cgi

More vulnerabilities in aria2

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free