CVE-2018-15501

2018-08-1802:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.004 Low

EPSS

Percentile

73.3%

JSON

In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol “ng” packet that lacks a ‘\0’ byte to trigger an out-of-bounds read that leads to DoS.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchlibgit2< 0.27.4-r0UNKNOWN
Alpine3.10-communitynoarchlibgit2-0.27< 0.27.4-r0UNKNOWN
Alpine3.10-mainnoarchlibgit2< 0.27.4-r0UNKNOWN
Alpine3.11-mainnoarchlibgit2< 0.27.4-r0UNKNOWN
Alpine3.12-communitynoarchlibgit2< 0.27.4-r0UNKNOWN
Alpine3.13-communitynoarchlibgit2-1.0< 0.27.4-r0UNKNOWN
Alpine3.13-communitynoarchlibgit2< 0.27.4-r0UNKNOWN
Alpine3.14-communitynoarchlibgit2-1.0< 0.27.4-r0UNKNOWN
Alpine3.14-communitynoarchlibgit2< 0.27.4-r0UNKNOWN
Alpine3.15-communitynoarchlibgit2-1.1< 0.27.4-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	libgit2	< 0.27.4-r0	UNKNOWN
Alpine	3.10-community	noarch	libgit2-0.27	< 0.27.4-r0	UNKNOWN
Alpine	3.10-main	noarch	libgit2	< 0.27.4-r0	UNKNOWN
Alpine	3.11-main	noarch	libgit2	< 0.27.4-r0	UNKNOWN
Alpine	3.12-community	noarch	libgit2	< 0.27.4-r0	UNKNOWN
Alpine	3.13-community	noarch	libgit2-1.0	< 0.27.4-r0	UNKNOWN
Alpine	3.13-community	noarch	libgit2	< 0.27.4-r0	UNKNOWN
Alpine	3.14-community	noarch	libgit2-1.0	< 0.27.4-r0	UNKNOWN
Alpine	3.14-community	noarch	libgit2	< 0.27.4-r0	UNKNOWN
Alpine	3.15-community	noarch	libgit2-1.1	< 0.27.4-r0	UNKNOWN

Rows per page:

1-10 of 171

0.004 Low

EPSS

Percentile

73.3%

JSON

Related for ALPINE:CVE-2018-15501