PT-2025-1015

🗓️ 06 Jan 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 16 Views

Denial of service vulnerability in go-git versions prior to v5.13 requires upgrade to v5.13

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider (CVE-2024-45337, CVE-2025-22869)	9 Jul 202504:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana for Self-Hosted Standard Edition is affected by multiple Vulnerabilities	15 Mar 202510:43	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of go-git, IBM Instana Observability is vulnerable to a denial of service and argument injection vulnerability.	4 Mar 202505:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in go and opm affect IBM Robotic Process Automation.	16 Jul 202413:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002.	2 May 202507:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	12 Jun 202515:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	12 Mar 202511:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin includes components with known vulnerabilities	20 Oct 202520:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in go-git [CVE-2025-21614]	27 Feb 202517:20	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ALSA-2025:0401
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-grafana-cve-2025-21614-cve-2025-21613
osv	www.osv.dev/vulnerability/openSUSE-SU-2025:14624-1
suse	www.suse.com/security/cve/CVE-2024-43803
suse	www.suse.com/security/cve/CVE-2024-25131
ubuntu	www.ubuntu.com/security/CVE-2025-21614
suse	www.suse.com/security/cve/CVE-2025-21609
errata	www.errata.rockylinux.org/RLSA-2025:0401
ubuntu	www.ubuntu.com/security/notices/USN-8088-1

12 Mar 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.8

CVSS 3.19.8 - 9.9

CVSS 49.2

EPSS0.77836

SSVC