PT-2017-7754 · Libgit2+2 · Libgit2+2

Andreas Stieger · Publicado 2017-01-12 · Atualizado 2017-08-29 · CVE-2016-10129

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.24.6 libgit2 versions 0.25.x prior to 0.25.1

Description The issue allows remote attackers to cause a denial of service due to a NULL pointer dereference via an empty packet line in the Git Smart Protocol support.

Recommendations For versions prior to 0.24.6, update to version 0.24.6 or later. For versions 0.25.x prior to 0.25.1, update to version 0.25.1 or later.

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2017-1036

CVE-2016-10129

MGASA-2017-0319

OPENSUSE-SU-2017:0405-1

SUSE-SU-2017:0433-1

Produtos afetados

Alt Linux

Suse

Libgit2

Referências · 38

• https://github.com/libgit2/libgit2/commit/84d30d569ada986f3eef527cbdb932643c2dd037 · Correção
• https://github.com/libgit2/libgit2/commit/2fdef641fd0dd2828bd948234ae86de75221a11a · Correção
• http://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-10130 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-10129 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-5339 · Nota
• http://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10130 · Nota de Segurança
• https://suse.com/security/cve/CVE-2017-5338 · Nota
• https://suse.com/security/cve/CVE-2016-10129 · Nota
• http://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html · Aviso do Fabricante
• https://bugzilla.suse.com/1019037 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2017:0433-1 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2017/01/10/5 · Correção
• https://packages.altlinux.org/ru/vuln/CVE-2016-10129 · Nota