|
2018-03-13
|
CVE-2018-8099 |
Testfoobar |
Libgit2
|
6.5
|
|
|
|
2018-03-13
|
CVE-2018-8098 |
Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service (out-of-bounds read) via a crafted repository index file. |
Libgit2
|
6.5
|
|
|
|
2017-02-03
|
CVE-2016-8569 |
The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file. |
Fedora,
Libgit2,
Leap,
Opensuse,
Linux_enterprise
|
5.5
|
|
|
2017-02-03
|
CVE-2016-8568 |
The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file. |
Fedora,
Libgit2,
Leap,
Opensuse,
Linux_enterprise
|
5.5
|
|
|
2017-03-24
|
CVE-2016-10130 |
The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable. |
Libgit2
|
5.9
|
|
|
|
2017-03-24
|
CVE-2016-10129 |
The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line. |
Libgit2
|
7.5
|
|
|
|
2017-03-24
|
CVE-2016-10128 |
Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet. |
Libgit2
|
9.8
|
|
|