797 matches found
EUVD-2023-26860
Malicious code in bioql PyPI...
EUVD-2024-21980
Malicious code in bioql PyPI...
EUVD-2024-21982
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-8099
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect returning of an error code in the index.c:readentry function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a...
Linux Distros Unpatched Vulnerability : CVE-2018-15501
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ngpkt in transports/smartpkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol ng packet that lacks a...
Linux Distros Unpatched Vulnerability : CVE-2016-10128
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the gitpktparseline function in transports/smartpkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1...
Linux Distros Unpatched Vulnerability : CVE-2016-10129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service NULL pointer dereference v...
Linux Distros Unpatched Vulnerability : CVE-2016-10130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The httpconnect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by...
Linux Distros Unpatched Vulnerability : CVE-2023-22742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform...
Linux Distros Unpatched Vulnerability : CVE-2018-8098
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial...
Linux Distros Unpatched Vulnerability : CVE-2024-24577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...
NewStart CGSL MAIN 7.02 : libgit2 Multiple Vulnerabilities (NS-SA-2025-0127)
The remote NewStart CGSL host, running version MAIN 7.02, has libgit2 packages installed that are affected by multiple vulnerabilities: - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...
TencentOS Server 4: rust (TSSA-2024:0634)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0634 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
TencentOS Server 4: libgit2 (TSSA-2024:0585)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0585 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
TencentOS Server 4: libgit2 (TSSA-2024:0586)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0586 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
libgit2:revparse_fuzzer: Heap-buffer-overflow in could_be_empty_branch
Project: https://github.com/libgit2/libgit2.git Detailed Report: https://oss-fuzz.com/testcase?key=5335659655266304 Project: libgit2 Fuzzing Engine: libFuzzer Fuzz Target: revparsefuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
libgit2:revparse_fuzzer: Heap-buffer-overflow in find_fixedlength
Project: https://github.com/libgit2/libgit2.git Detailed Report: https://oss-fuzz.com/testcase?key=5067568165748736 Project: libgit2 Fuzzing Engine: libFuzzer Fuzz Target: revparsefuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
libgit2:revparse_fuzzer: Stack-use-after-return in compile_regex
Project: https://github.com/libgit2/libgit2.git Detailed Report: https://oss-fuzz.com/testcase?key=5801762915418112 Project: libgit2 Fuzzing Engine: libFuzzer Fuzz Target: revparsefuzzer Job Type: libfuzzerasanlibgit2 Platform Id: linux Crash Type: Stack-use-after-return READ 2 Crash Address:...
Amazon Linux 2 : rust, --advisory ALAS2-2025-2804 (ALAS-2025-2804)
The version of rust installed on the remote host is prior to 1.82.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2804 advisory. The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::sethost...
Important: rust
Issue Overview: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code...