CVE-2016-8568 PUBLISHED

The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.

EPSS 0.47% · 64.4th percentile

Risk Scores

EPSS Score
0.47%
64.4th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSlibgit20.24.1-2ubuntu0.2, 0.22.2-2, 0.23.1-1
Ubuntu:Pro:14.04:LTSlibgit20.19.0-2, 0.19.0-2ubuntu0.4, 0

Timeline

References

Open in Interactive Console →