libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`

...

SUSE CVE-2024-24577

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. There...

DEBIAN-CVE-2024-24577

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. There...

UBUNTU-CVE-2024-24577

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. There...

libgit2 Security Vulnerabilities

libgit2 is a portable, C implementation of the Git core development package. A security vulnerability exists in libgit2. An attacker exploiting this vulnerability with a specially crafted "gitindexadd" input could cause heap corruption, which could lead to the execution of arbitrary code...

PT-2024-1689

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 1.6.5 libgit2 versions prior to 1.7.2 Description The issue is related to a heap corruption vulnerability in the has dir name function in src/libgit2/index.c, which can be exploited for arbitrary code execution. This...