Libgit2 Project Libgit2 vulnerabilities

5 vulnerabilities

Known vulnerabilities in Libgit2 Project Libgit2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2016-10128alpinelibgit2+4
EPSS score
3.96%
Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.5.9CVE-2016-10130alpinelibgit2+4
EPSS score
1.72%
The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.7.5CVE-2016-10129alpinelibgit2+4
EPSS score
3.64%
The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line.5.5CVE-2016-8569alpinelibgit2+8
EPSS score
1.84%
The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.5.5CVE-2016-8568alpinelibgit2+8
EPSS score
1.90%
The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.