745 matches found
CVE-2016-8569
Vulnerability details (CVE-2016-8569): The libgit2 library (versions before 0.24.3) is affected by a denial-of-service via a NULL pointer dereference in git_commit_message when processing certain crafted objects (cat-file usage). Public advisories in Debian/Ubuntu openSUSE notes confirm the issue...
CVE-2016-8569
The gitoidnfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service NULL pointer dereference via a cat-file command with a crafted object file...
CVE-2016-8569: NULL Pointer Dereference
The gitoidnfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service NULL pointer dereference via a cat-file command with a crafted object file...
CVE-2016-8568: Out-of-bounds Read
The gitcommitmessage function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service out-of-bounds read via a cat-file command with a crafted object file...
OPENSUSE-SU-2017:0195-1 Security update for libgit2
AThis update for libgit2 fixes the following issues: - CVE-2016-8568: invalid memory accesses parsing object files out-of-bound read boo1003810 - CVE-2016-8569: invalid memory accesses parsing object files NULL pointer de-reference boo1003810...
openSUSE Security Update : libgit2 (openSUSE-2017-110)
This update for libgit2 fixes the following issues : - CVE-2016-8568: Fixed and out-of-bounds read in gitoidnfmt bsc1003810. - CVE-2016-8569: DoS using a NULL pointer dereference in gitcommitmessage bsc1003810. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Fedora 24 : libgit2 (2017-403346d884)
Update to 0.24.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora 25 : libgit2 (2017-2ddf7d452a)
Update to 0.24.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
[ASA-201701-21] libgit2: multiple issues
Arch Linux Security Advisory ASA-201701-21 ========================================== Severity: High Date : 2017-01-15 CVE-ID : CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 Package : libgit2 Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-131 Summary ======= The...
[SECURITY] Fedora 25 Update: libgit2-0.24.6-1.fc25
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
Fedora Update for libgit2 FEDORA-2017-2ddf7d452a
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 24 Update: libgit2-0.24.6-1.fc24
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
libgit2 Buffer Overflow Vulnerability
libgit2 is a portable, C implementation of the Git core development package . A buffer overflow vulnerability exists in the smartpkt.c file in libgit2. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected application, resulting in a denial of servic...
libgit2 Security Bypass Vulnerability
libgit2 is a portable, C implementation of the Git core development kit . A security bypass vulnerability exists in the badssl.c file in libgit versions 20.25 and 0.24. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack, bypass security restrictions and perform...
Fedora Update for libgit2 FEDORA-2017-403346d884
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libgit2 security bypass vulnerability (CNVD-2017-00488)
libgit2 is a portable, C implementation of the Git core development package . A security bypass vulnerability exists in the badssl.c file in libgit versions 20.25 and 0.24. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...
libgit2 Remote Code Execution Vulnerability
libgit2 is a portable, C implementation of the Git core development kit . A remote code execution vulnerability exists in libgit versions 20.25 and 0.24. An attacker could exploit this vulnerability to execute arbitrary code or cause the affected application to crash denial of service...
libgit2 security bypass vulnerability (CNVD-2017-00490)
libgit2 is a portable, C implementation of the Git core development kit . A security bypass vulnerability exists in the src/transports/http.c file in libgit2 versions 0.25 and 0.24. An attacker can exploit this vulnerability to conduct a man-in-the-middle attack, bypass security restrictions and...
PT-2017-7754
Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.24.6 libgit2 versions 0.25.x prior to 0.25.1 Description The issue allows remote attackers to cause a denial of service due to a NULL pointer dereference via an empty packet line in the Git Smart Protocol support...
PT-2017-7753
Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 0.24.6 libgit2 versions 0.25.x prior to 0.25.1 Description A buffer overflow issue exists in the git pkt parse line function in transports/smart pkt.c, which is part of the Git Smart Protocol support in libgit2. This...