CVE-2012-6129: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 5.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted "micro transport protocol packets."

Affected products

• Canonical Ubuntu Linux: version 11.10 only; version 12.04 only; version 12.10 only
• Fedoraproject Fedora: version 16 only
• Transmissionbt Transmission: up to and including 2.73; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2013-04-03. Last modified 2026-06-16.