Lucene search

K
osvGoogleOSV:DSA-1637-1
HistorySep 15, 2008 - 12:00 a.m.

git-core - buffer overflow

2008-09-1500:00:00
Google
osv.dev
3

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.4%

Multiple vulnerabilities have been identified in git-core, the core of
the git distributed revision control system. Improper path length
limitations in git’s diff and grep functions, in combination with
maliciously crafted repositories or changes, could enable a stack
buffer overflow and potentially the execution of arbitrary code.

The Common Vulnerabilities and Exposures project identifies this
vulnerability as CVE-2008-3546.

For the stable distribution (etch), this problem has been fixed in
version 1.4.4.4-2.1+etch1.

For the unstable distribution (sid), this problem has been fixed in
version 1.5.6.5-1.

We recommend that you upgrade your git-core packages.

CPENameOperatorVersion
git-coreeq1:1.4.4.4-2

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.4%