LI
Product
Libgit2
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 3Low 0
Watch
Add Libgit2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-10128 | 9.8 | Mar 24 | Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote… Affected: through 0.24.5; 0.25.0; 0.25.0; 0.25.0 |
| CVE-2016-10129 | 7.5 | Mar 24 | The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty… Affected: through 0.24.5; 0.25.0; 0.25.0; 0.25.0 |
| CVE-2016-10130 | 5.9 | Mar 24 | The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering… Affected: through 0.24.5; 0.25.0; 0.25.0; 0.25.0 |
| CVE-2016-8569 | 5.5 | Feb 3 | The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a… Affected: through 0.24.2 |
| CVE-2016-8568 | 5.5 | Feb 3 | The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted… Affected: through 0.24.2 |
Showing 5