VDB

CVE-2016-10128

CVE-2016-10128 PUBLISHED

Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.

EPSS 1.92% · 83.7th percentile

Risk Scores

EPSS Score
1.92%
83.7th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSlibgit20.24.1-2ubuntu0.2+esm2, 0.23.1-1, 0.24.1-2
Ubuntu:Pro:14.04:LTSlibgit20.19.0-2, 0.19.0-2ubuntu0.4, 0.19.0-2ubuntu0.4+esm1

Timeline

  • Feb 6, 2017 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Sep 3, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • Jul 16, 2023 EPSS Score
  • Sep 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›