PT-2018-3972 · Libgit2+2 · Libgit2+2

Krishna Ram Prakash R

+1

·

Published

2018-03-08

·

Updated

2022-04-25

·

CVE-2018-8099

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.26.2
Description The issue is related to a double free error in the index.c:read entry() function of libgit2, a C implementation of the Git methods. This error can be exploited by a remote attacker to cause a denial of service. The exploitation is possible via a crafted repository index file.
Recommendations For versions prior to 0.26.2, update to version 0.26.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the index.c:read entry() function until a patch is available.

Exploit

Fix

DoS

Double Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-415

Related Identifiers

ALT-PU-2018-1400
BDU:2023-07802
CVE-2018-8099
DLA-2936-1
OPENSUSE-SU-2018_3519-1
SUSE-SU-2018:3440-1

Affected Products

Alt Linux
Suse
Libgit2