High severity7.5NVD Advisory· Published Jun 30, 2016· Updated Jun 17, 2026

CVE-2016-5301

Description

The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP broadcast.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arvidn/Libtorrent2 versions
cpe:2.3:a:arvidn:libtorrent:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:arvidn:libtorrent:*:*:*:*:*:*:*:*range: <=1.1
- (no CPE)range: <1.1.1
OpenSUSE/Leap
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
OpenSUSE/openSUSE
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

lists.opensuse.org/opensuse-updates/2016-06/msg00079.htmlnvd
lists.opensuse.org/opensuse-updates/2016-06/msg00103.htmlnvd
lists.opensuse.org/opensuse-updates/2016-09/msg00043.htmlnvd
www.openwall.com/lists/oss-security/2016/06/04/9nvd
www.openwall.com/lists/oss-security/2016/06/05/1nvd
www.securityfocus.com/bid/91498nvd
github.com/arvidn/libtorrent/issues/780nvd
github.com/arvidn/libtorrent/pull/782/filesnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000