Libgit2 Project Libgit2
5 CVEs affecting Libgit2 Project Libgit2. Latest disclosed: 2017-03-24. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10128 | Critical | 9.8 | 2017-03-24 | Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25… |
CVE-2016-10129 | High | 7.5 | 2017-03-24 | The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference… |
CVE-2016-10130 | Medium | 5.9 | 2017-03-24 | The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by le… |
CVE-2016-8569 | Medium | 5.5 | 2017-02-03 | The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file c… |
CVE-2016-8568 | Medium | 5.5 | 2017-02-03 | The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file comm… |