{"id":"CVE-2018-10756","details":"Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.","modified":"2026-08-07T14:54:03.659927Z","published":"2020-05-15T16:15:11.437Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"},{"cpes":["cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"31"},{"last_affected":"31"},{"introduced":"32"},{"last_affected":"32"}],"source":"CPE_STRING","vendor_product":"fedoraproject:fedora"}]},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CD3GLZ5URIK74RCGLSH72IVLDIJJMLQC/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OVAG2HNKNRLWOACFN5F2ANJD2SQ53WI7/"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00022.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00001.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202007-07"},{"type":"FIX","url":"https://github.com/transmission/transmission/commit/2123adf8e5e1c2b48791f9d22fc8c747e974180e"},{"type":"EVIDENCE","url":"https://tomrichards.net/2020/05/cve-2018-10756-transmission/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/transmission/transmission","events":[{"introduced":"0"},{"fixed":"bb6b5a062ee594dfd4b7a12a6b6e860c43849bfd"},{"fixed":"2123adf8e5e1c2b48791f9d22fc8c747e974180e"}],"database_specific":{"cpe":"cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"3.00"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["2.92","2.91","2.90","2.83","2.82","2.81","2.80","2.74","2.73","2.72","2.71","2.70","2.61","2.60","2.52","2.51","2.50","2.50b1","2.40","2.40b3","2.40b2","2.40b1","2.33","2.32","2.31","2.30","2.30b4","2.30b3","2.30b2","2.30b1","2.21","2.20","2.20b4","2.20b3","2.20b2","2.20b1","2.13","2.12","2.11","2.10","2.00","1.91","1.90","1.83","1.82","1.81","1.80","1.80b5","1.74","1.73","1.72","1.71","1.70","1.61","1.60","1.40","1.32","1.31","1.22","1.21","1.20","1.11","1.10","1.06","0.80","0.7","0.6","0.5"],"database_specific":{"vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/transmission/transmission/commit/2123adf8e5e1c2b48791f9d22fc8c747e974180e","target":{"file":"libtransmission/variant.c","function":"nodeDestruct"},"deprecated":false,"digest":{"function_hash":"194995719330406091812826183943619373024","length":134},"id":"CVE-2018-10756-3e0a8003"},{"id":"CVE-2018-10756-c2cb0d50","signature_type":"Line","signature_version":"v1","source":"https://github.com/transmission/transmission/commit/2123adf8e5e1c2b48791f9d22fc8c747e974180e","target":{"file":"libtransmission/variant.c"},"deprecated":false,"digest":{"line_hashes":["205341425966775455266947803454072864342","186298122512339726067490783789045647475","241841024893850238989383601383399329181","297769203373723619936908509348520953877","16281207192845962926434539192494503102","36661329408352694312598255970400150267","165787236079533757607666994787189528202","170735048636454511546035620715548904480","196854580085047319841680633566985729845","148621558390534263943533350062913747949","237725762747458195177517906863083938719","177690536450336511186038219104097524502","190178365917296507824607380120311876405","70417715182752542784090011700410117285","19387239828159012246949123632929771867","310215334520923315609818534253902234510","120906795045880473082725910541673206916","152960111655223256145355087776338936205","281845614597655727281794179635007353388","187469731113895534418159046986519023829","164995996755799471948723899102297508332","214147291582426748995512608869030643900","89361456510166854025102894971283044538","335857462444111579407503361944048457622","28846016962681830002232241096011907321","172493778502767576802886301696417933935"],"threshold":0.9}},{"id":"CVE-2018-10756-eb8dba84","signature_type":"Function","signature_version":"v1","source":"https://github.com/transmission/transmission/commit/2123adf8e5e1c2b48791f9d22fc8c747e974180e","target":{"file":"libtransmission/variant.c","function":"nodeConstruct"},"deprecated":false,"digest":{"length":771,"function_hash":"17388500939090276674131285024898318880"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10756.json","vanir_signatures_modified":"2026-08-07T14:54:03Z"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}