{"schemaVersion":3,"id":"USN-6678-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"libgit2 vulnerabilities\n\nIt was discovered that libgit2 mishandled equivalent filenames on NTFS\npartitions. If a user or automated system were tricked into cloning a\nspecially crafted repository, an attacker could possibly use this issue to\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 18.04 LTS. (CVE-2020-12278, CVE-2020-12279)\n\nIt was discovered that libgit2 did not perform certificate checking by\ndefault. An attacker could possibly use this issue to perform a\nmachine-in-the-middle attack. This issue only affected Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2023-22742)\n\nIt was discovered that libgit2 could be made to run into an infinite loop.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 23.10. (CVE-2024-24575)\n\nIt was discovered that libgit2 did not properly manage memory. An attacker\ncould possibly use this issue to cause a denial of service or execute\narbitrary code. (CVE-2024-24577)","dates":{"published":"2024-03-05T18:46:35.000Z","modified":"2026-06-25T13:32:28.756Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"libgit2","name":"libgit2","label":"libgit2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libgit2","purlType":"deb","versions":[{"text":"< 0.24.1-2ubuntu0.2+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 0.26.0+dfsg.1-1.1ubuntu0.2+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.28.4+dfsg.1-2ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.1.0+dfsg.1-4.1ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.24.1-2ubuntu0.2+esm2 | < 0.26.0+dfsg.1-1.1ubuntu0.2+esm1 | < 0.28.4+dfsg.1-2ubuntu0.1 | < 1.1.0+dfsg.1-4.1ubuntu0.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-6678-1","label":"ubuntu.com/security/notices/USN-6678-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-12278","label":"ubuntu.com/security/CVE-2020-12278","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-12279","label":"ubuntu.com/security/CVE-2020-12279","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2023-22742","label":"ubuntu.com/security/CVE-2023-22742","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-24575","label":"ubuntu.com/security/CVE-2024-24575","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-24577","label":"ubuntu.com/security/CVE-2024-24577","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2020-12278","CVE-2020-12279","CVE-2023-22742","CVE-2024-24577"],"downstream":[],"duplicates":[],"related":["CVE-2020-12278","CVE-2020-12279","CVE-2023-22742","CVE-2024-24577"]},"timeline":[{"kind":"published","date":"2024-03-05T18:46:35.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:28.756Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T17:46:27.413Z","stale":false,"partial":false}}