CVE-2016-8568
03.02.2017, 15:59
The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| opensuse | leap | 42.1 |
| opensuse | leap | 42.2 |
| opensuse | opensuse | 13.2 |
| suse | linux_enterprise | 12.0 |
| libgit2_project | libgit2 | 𝑥 ≤ 0.24.2 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cargo |
| ||||||||||||||
| libgit2 |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libgit2 |
|
Common Weakness Enumeration
References