Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
aria2 vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2009-3575
Buffer overflow in DHTRoutingTableDeserializer.cc in aria2 0.15.3, 1.2.0, and other versions allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Tatsuhiro Tsujikawa Aria2 0.15.3
Tatsuhiro Tsujikawa Aria2 1.2.0
7.6
CVSSv2
CVE-2009-3617
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 prior to 1.6.2, when logging is enabled, allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via format string specifiers i...
Tatsuhiro Tsujikawa Aria2 1.4.0
Tatsuhiro Tsujikawa Aria2 1.6.0
Tatsuhiro Tsujikawa Aria2 0.13.0\\+1
Tatsuhiro Tsujikawa Aria2 0.16.2
Tatsuhiro Tsujikawa Aria2 0.15.2
Tatsuhiro Tsujikawa Aria2 1.5.2
Tatsuhiro Tsujikawa Aria2 0.16.0
Tatsuhiro Tsujikawa Aria2 0.14.0
Tatsuhiro Tsujikawa Aria2 0.15.1\\+1
Tatsuhiro Tsujikawa Aria2 1.0.0
Tatsuhiro Tsujikawa Aria2 0.13.2\\+1
Tatsuhiro Tsujikawa Aria2 1.3.0
Tatsuhiro Tsujikawa Aria2 0.12.0
Tatsuhiro Tsujikawa Aria2 1.1.1
Tatsuhiro Tsujikawa Aria2 0.13.1
Tatsuhiro Tsujikawa Aria2 0.11.5
Tatsuhiro Tsujikawa Aria2 1.5.1
Tatsuhiro Tsujikawa Aria2 0.13.2
Tatsuhiro Tsujikawa Aria2 0.15.3
Tatsuhiro Tsujikawa Aria2 0.14.0\\+1
Tatsuhiro Tsujikawa Aria2 0.13.1\\+1
Tatsuhiro Tsujikawa Aria2 1.3.3
4.3
CVSSv2
CVE-2010-1512
Directory traversal vulnerability in aria2 prior to 1.9.3 allows remote malicious users to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
Tatsuhiro Tsujikawa Aria2 0.13.0\\+1
Tatsuhiro Tsujikawa Aria2 1.5.1
Tatsuhiro Tsujikawa Aria2 1.4.0
Tatsuhiro Tsujikawa Aria2 1.1.2
Tatsuhiro Tsujikawa Aria2 0.16.2
Tatsuhiro Tsujikawa Aria2 0.14.0
Tatsuhiro Tsujikawa Aria2 0.13.2
Tatsuhiro Tsujikawa Aria2 1.2.0
Tatsuhiro Tsujikawa Aria2 0.11.1\\+1
Tatsuhiro Tsujikawa Aria2 0.11.1
Tatsuhiro Tsujikawa Aria2 0.8.1
Tatsuhiro Tsujikawa Aria2 0.8.0
Tatsuhiro Tsujikawa Aria2 0.5.2
Tatsuhiro Tsujikawa Aria2 0.5.1
Tatsuhiro Tsujikawa Aria2 0.3.1\\+2
Tatsuhiro Tsujikawa Aria2 0.3.1\\+1
Tatsuhiro Tsujikawa Aria2 0.3.1
Tatsuhiro Tsujikawa Aria2 1.9.0
Tatsuhiro Tsujikawa Aria2 1.8.3
Tatsuhiro Tsujikawa Aria2 1.6.3
Tatsuhiro Tsujikawa Aria2 1.6.2
Tatsuhiro Tsujikawa Aria2 0.15.1\\+1
2.1
CVSSv2
CVE-2019-3500
aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sensitive information by reading this file.
Aria2 Project Aria2 1.33.1
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Fedoraproject Fedora 28
Fedoraproject Fedora 29
Fedoraproject Fedora 30
Canonical Ubuntu Linux 18.10
Canonical Ubuntu Linux 19.04
NA
CVE-2023-39141
webui-aria2 commit 4fe2e exists to contain a path traversal vulnerability.
Ziahamza Webui-aria2 -
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started