PT-2018-3972 · Libgit2+2 · Libgit2+2

Krishna Ram Prakash R

+1

·

Publicado

2018-03-08

·

Atualizado

2022-04-25

·

CVE-2018-8099

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.26.2
Description The issue is related to a double free error in the index.c:read entry() function of libgit2, a C implementation of the Git methods. This error can be exploited by a remote attacker to cause a denial of service. The exploitation is possible via a crafted repository index file.
Recommendations For versions prior to 0.26.2, update to version 0.26.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the index.c:read entry() function until a patch is available.

Exploit

Correção

DoS

Double Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

ALT-PU-2018-1400
BDU:2023-07802
CVE-2018-8099
DLA-2936-1
OPENSUSE-SU-2018_3519-1
SUSE-SU-2018:3440-1

Produtos afetados

Alt Linux
Suse
Libgit2