7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
8.4%
Multiple vulnerabilities have been identified in git-core, the core of
the git distributed revision control system. Improper path length
limitations in git’s diff and grep functions, in combination with
maliciously crafted repositories or changes, could enable a stack
buffer overflow and potentially the execution of arbitrary code.
The Common Vulnerabilities and Exposures project identifies this
vulnerability as CVE-2008-3546.
For the stable distribution (etch), this problem has been fixed in
version 1.4.4.4-2.1+etch1.
For the unstable distribution (sid), this problem has been fixed in
version 1.5.6.5-1.
We recommend that you upgrade your git-core packages.
CPE | Name | Operator | Version |
---|---|---|---|
git-core | eq | 1:1.4.4.4-2 |