PT-2017-9699 · Libgit2+3 · Libgit2+3

Gaa-Cifasis

·

Publicado

2016-11-08

·

Atualizado

2024-06-15

·

CVE-2016-8568

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.24.3
Description The issue allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file. This is related to the git commit message function in oid.c.
Recommendations For versions prior to 0.24.3, update to version 0.24.3 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted object files to minimize the risk of exploitation.

Correção

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2016-2254
CVE-2016-8568
MGASA-2017-0319
OPENSUSE-SU-2017:0195-1
OPENSUSE-SU-2024:10249-1
SUSE-SU-2016:2969-1
SUSE-SU-2016_2969-1
USN-4798-1

Produtos afetados

Alt Linux
Suse
Ubuntu
Libgit2