CVE-2016-10128 PUBLISHED

Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.

EPSS 2.74% · 85.9th percentile

Risk Scores

EPSS Score
2.74%
85.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSlibgit20.24.1-2ubuntu0.2+esm2, 0.23.1-1, 0.24.1-2
Ubuntu:Pro:14.04:LTSlibgit20.19.0-2, 0.19.0-2ubuntu0.4, 0.19.0-2ubuntu0.4+esm1

Timeline

References

Open in Interactive Console →