CVE-2018-5702
CVE-2018-5702 is a high-severity vulnerability in Transmissionbt Transmission with a CVSS 3.x base score of 8.8. Its EPSS exploit-prediction score of 12% places it in the 96th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: High (CVSS 3.x base score 8.8)
- CVSS v2: 6.8
- EPSS exploit prediction: 12% (96th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Transmissionbt Transmission
- Published:
- Last modified:
Description
Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.
Frequently asked questions
- What is CVE-2018-5702?
- Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.
- How severe is CVE-2018-5702?
- CVE-2018-5702 has a CVSS 3.x base score of 8.8, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2018-5702 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 12% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2018-5702?
- CVE-2018-5702 primarily affects Transmissionbt Transmission. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2018-5702?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2018-5702 published?
- CVE-2018-5702 was published on 2018-01-15 and last updated on 2026-06-17.
References
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1447
- https://github.com/transmission/transmission/pull/468
- https://lists.debian.org/debian-lts-announce/2018/01/msg00020.html
- https://security.gentoo.org/glsa/201806-07
- https://twitter.com/taviso/status/951526615145566208
- https://www.debian.org/security/2018/dsa-4087
- https://www.exploit-db.com/exploits/43665/
Affected products (4)
- cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
More vulnerabilities in Transmissionbt Transmission
- CVE-2010-0748 — Critical (CVSS 9.8): Transmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified…
- CVE-2010-0012 — High (CVSS 8.8): Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows…
- CVE-2018-10756 — High (CVSS 7.8): Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of…
- CVE-2012-6129 — High (CVSS 7.5): Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products,…
- CVE-2014-4909 — Medium (CVSS 6.8): Integer overflow in the tr_bitfieldEnsureNthBitAlloced function in bitfield.c in Transmission before 2.84 allows remote…
- CVE-2010-1853 — Medium (CVSS 6.8): Multiple stack-based buffer overflows in the tr_magnetParse function in libtransmission/magnet.c in Transmission 1.91…