Buffer overflow in Dulwich_project Dulwich
CVE-2015-0838
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
Vulnerability class: Buffer Overflow
EPSS: 0.034 (87.4th percentile) — read the EPSS interpretation.
Affected products
- Dulwich_project Dulwich
- Debian Debian_linux — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)
- security@debian.org (Vendor Advisory, mailing-list, x_refsource_MLIST)