Vulnetix
Try Vulnetix Request Demo
CVE-2018-15501 PUBLISHED

In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that lacks a '\0' byte to trigger an out-of-bounds read that leads to DoS.

EPSS 0.45% · 63.3th percentile

Risk Scores

EPSS Score
0.45%
63.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSlibgit20.26.0+dfsg.1-1.1ubuntu0.2+esm1, 0.26.0+dfsg.1-1.1, 0.26.0+dfsg.1-1.1ubuntu0.2
Ubuntu:Pro:16.04:LTSlibgit20.24.1-2ubuntu0.2+esm2, 0.24.1-2ubuntu0.2, 0
Ubuntu:Pro:14.04:LTSlibgit20, 0.19.0-2ubuntu0.4+esm1, 0.19.0-2ubuntu0.4

Timeline

References

Open in Interactive Console →