PT-2009-1093 · Git · Git

Tomas Hoger

·

Publicado

2009-06-18

·

Atualizado

2017-08-17

·

CVE-2009-2108

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions git versions 1.4.4.5 through 1.6.3 git versions prior to 1.6.3.3
Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and CPU consumption. This can be achieved by sending a request with extra unrecognized arguments. The vulnerability can be exploited remotely, potentially leading to a disruption in the availability of protected information.
Recommendations For git versions 1.4.4.5 through 1.6.3, consider updating to a version outside of this range to mitigate the risk. For git versions prior to 1.6.3.3, update to version 1.6.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the git-daemon to minimize the risk of exploitation.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2015-09397
CVE-2009-2108
DSA-1841-1
DSA-1841-2

Produtos afetados

Git