VDB

DEBIAN-CVE-2016-10128

DEBIAN-CVE-2016-10128 PUBLISHED CVSS 9.800000190734863 CRITICAL

Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.

Risk Scores

CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:11cargo0, 0, 0
Debian:14libgit20, 0, 0
Debian:12libgit20, 0, 0
Debian:13libgit20, 0, 0
Debian:11libgit20, 0, 0
Debian:12cargo0, 0, 0

Timeline

  • Mar 24, 2017 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›