CVE-2008-3546

Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
gitgit
1.5.5.3
gitgit
1.5.5.3:r1
gitgit
1.5.5.4
gitgit
1.5.6.1
gitgit
1.5.6.2
gitgit
1.5.6.3
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
git-core
intrepid
Fixed 1:1.5.6.3-1.1ubuntu2.1
released
hardy
Fixed 1:1.5.4.3-1ubuntu2.1
released
gutsy
Fixed 1:1.5.2.5-2ubuntu0.1
released
feisty
ignored
dapper
Fixed 1.1.3-1ubuntu1.1
released
References