581 matches found
CVE-2016-8568
The gitcommitmessage function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service out-of-bounds read via a cat-file command with a crafted object file...
CVE-2016-8569
The gitoidnfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service NULL pointer dereference via a cat-file command with a crafted object file...
CVE-2016-8568
CVE-2016-8568 affects libgit2 prior to 0.24.3, where the git_commit_message function in oid.c can trigger an out-of-bounds read via a crafted object file when a cat-file command is processed. This has been publicly documented across multiple advisories and feeds (NVD entry and vendor-focused noti...
CVE-2016-8569
Vulnerability details (CVE-2016-8569): The libgit2 library (versions before 0.24.3) is affected by a denial-of-service via a NULL pointer dereference in git_commit_message when processing certain crafted objects (cat-file usage). Public advisories in Debian/Ubuntu openSUSE notes confirm the issue...
CVE-2016-8569
The gitoidnfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service NULL pointer dereference via a cat-file command with a crafted object file...
OPENSUSE-SU-2017:0195-1 Security update for libgit2
AThis update for libgit2 fixes the following issues: - CVE-2016-8568: invalid memory accesses parsing object files out-of-bound read boo1003810 - CVE-2016-8569: invalid memory accesses parsing object files NULL pointer de-reference boo1003810...
openSUSE Security Update : libgit2 (openSUSE-2017-110)
This update for libgit2 fixes the following issues : - CVE-2016-8568: Fixed and out-of-bounds read in gitoidnfmt bsc1003810. - CVE-2016-8569: DoS using a NULL pointer dereference in gitcommitmessage bsc1003810. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Fedora 24 : libgit2 (2017-403346d884)
Update to 0.24.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora 25 : libgit2 (2017-2ddf7d452a)
Update to 0.24.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
[ASA-201701-21] libgit2: multiple issues
Arch Linux Security Advisory ASA-201701-21 ========================================== Severity: High Date : 2017-01-15 CVE-ID : CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 Package : libgit2 Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-131 Summary ======= The...
[SECURITY] Fedora 25 Update: libgit2-0.24.6-1.fc25
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
Fedora Update for libgit2 FEDORA-2017-2ddf7d452a
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 24 Update: libgit2-0.24.6-1.fc24
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
libgit2 Buffer Overflow Vulnerability
libgit2 is a portable, C implementation of the Git core development package . A buffer overflow vulnerability exists in the smartpkt.c file in libgit2. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected application, resulting in a denial of servic...
libgit2 Security Bypass Vulnerability
libgit2 is a portable, C implementation of the Git core development kit . A security bypass vulnerability exists in the badssl.c file in libgit versions 20.25 and 0.24. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack, bypass security restrictions and perform...
libgit2 security bypass vulnerability (CNVD-2017-00488)
libgit2 is a portable, C implementation of the Git core development package . A security bypass vulnerability exists in the badssl.c file in libgit versions 20.25 and 0.24. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...
Fedora Update for libgit2 FEDORA-2017-403346d884
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libgit2 Remote Code Execution Vulnerability
libgit2 is a portable, C implementation of the Git core development kit . A remote code execution vulnerability exists in libgit versions 20.25 and 0.24. An attacker could exploit this vulnerability to execute arbitrary code or cause the affected application to crash denial of service...
libgit2 security bypass vulnerability (CNVD-2017-00490)
libgit2 is a portable, C implementation of the Git core development kit . A security bypass vulnerability exists in the src/transports/http.c file in libgit2 versions 0.25 and 0.24. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack, bypass security restrictions and...
openSUSE Security Update : libgit2 (openSUSE-2016-1450)
libgit2 was updated to fix two security issues. These security issues were fixed : - CVE-2016-8568: Read out-of-bounds in gitoidnfmt bsc1003810. - CVE-2016-8569: DoS caused by a NULL pointer dereference in gitcommitmessage bsc1003810. This update was imported from the SUSE:SLE-12-SP2:Update updat...