CVE-2024-5795 Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion

A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version...

CVE-2024-5795 Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion

A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version...

CVE-2024-5795: Uncontrolled Resource Consumption

A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version...

PT-2024-37160 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.14 Description: A Denial of Service issue was identified in GitHub Enterprise Server, allowing an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server. This...

go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

A path traversal vulnerability was discovered in the go library go-git. This issue may allow an attacker to create and amend files across the filesystem when applications are using the default ChrootOS, potentially allowing remote code execution...

go-git: Maliciously crafted Git server replies can cause DoS on go-git clients

A denial of service DoS vulnerability was found in the go library go-git. This issue may allow an attacker to perform denial of service attacks by providing specially crafted responses from a Git server, which can trigger resource exhaustion in go-git clients...

jenkins-2-plugins: git-server plugin arbitrary file read vulnerability

A flaw was found in the Git Server Plugin for Jenkins. This issue could allow an attacker to read the first two lines of arbitrary files on the server's file system...

jenkins-2-plugins: git-server plugin arbitrary file read vulnerability

A flaw was found in the Git Server Plugin for Jenkins. This issue could allow an attacker to read the first two lines of arbitrary files on the server's file system...

jenkins-2-plugins: git-server plugin arbitrary file read vulnerability

A flaw was found in the Git Server Plugin for Jenkins. This issue could allow an attacker to read the first two lines of arbitrary files on the server's file system...

RHEL 9 : go-git (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients...

Improper Authorization

org.jenkins-ci.plugins: git-server is vulnerable to Improper Authorization. The vulnerability is due to improper permission checks for read access to a Git repository over SSH. This allows attackers with a previously configured SSH public key but lacking Overall/Read permission to access Git...

CVE-2024-34146

A flaw was found in the Jenkins Git server Plugin, involving inadequate permission validation for reading Git repositories over SSH. Through the manipulation of crafted requests, a malicious actor can attain unauthorized read access to a Git repository over SSH. Subsequently, they could utilize...

org.jenkins-ci.plugins:scriptler (>=2.5.1, <=2.6.1) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.1)

org.jenkins-ci.plugins:git-server MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins:scriptler =2.5.1, =2.6.1 Source cves: CVE-2024-34146 Source advisory:...

Jenkins Git server Plugin does not perform a permission check

Jenkins Git server Plugin 114.v068ac7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH. This allows attackers with a previously configured SSH public key but lacking Overall/Read permission to access Git repositories. Git server Plugin...

org.biouno:uno-choice (>=1.5-alpha-1, <=1.5.3), org.jenkins-ci.plugins:scriptler (2.9) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.6)

org.jenkins-ci.plugins:git-server MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.biouno:uno-choice =1.5-alpha-1, =1.5.3 - org.jenkins-ci.plugins:scriptler 2.9 Source cves:...

org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.9)

org.jenkins-ci.plugins:git-server MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.3, =2.5.3 Source cves: CVE-2024-34146 Source...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=0.1-beta-5, <=0.1-beta-7) +1 more potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.4)

org.jenkins-ci.plugins:git-server MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5, =0.1-beta-7 -...

org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:scriptler (2.7) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.3)

org.jenkins-ci.plugins:git-server MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.biouno:uno-choice =1.0, =1.4 - org.jenkins-ci.plugins:scriptler 2.7 Source cves:...

org.jenkins-ci.plugins:git-usercontent (>=1.0, <=1.3) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.0)

org.jenkins-ci.plugins:git-server MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins:git-usercontent =1.0, =1.3 Source cves: CVE-2024-34146 Source advisory:...

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.8, <=2.9), org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.7)

org.jenkins-ci.plugins:git-server MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps-global-lib =2.8, =2.9 -...