PT-2017-7753 · Libgit2+2 · Libgit2+2

Andreas Stieger

·

Publicado

2017-01-12

·

Atualizado

2024-06-15

·

CVE-2016-10128

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.24.6 libgit2 versions 0.25.x prior to 0.25.1
Description A buffer overflow issue exists in the git pkt parse line function in transports/smart pkt.c, which is part of the Git Smart Protocol support in libgit2. This issue allows remote attackers to have an unspecified impact via a crafted non-flush packet.
Recommendations For libgit2 versions prior to 0.24.6, update to version 0.24.6 or later. For libgit2 versions 0.25.x prior to 0.25.1, update to version 0.25.1 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2017-1036
CVE-2016-10128
MGASA-2017-0319
OPENSUSE-SU-2017:0405-1
OPENSUSE-SU-2024:10943-1
SUSE-SU-2017:0433-1
SUSE-SU-2017_0433-1

Produtos afetados

Alt Linux
Suse
Libgit2