Lucene search

K
cvelistDebianCVELIST:CVE-2016-10130
HistoryMar 24, 2017 - 3:00 p.m.

CVE-2016-10130

2017-03-2415:00:00
debian
raw.githubusercontent.com
3

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.5%

The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.5%