CVE-2016-2324

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)...

9.8 CriticalFix available

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

18.1%Up 7.2 points since Feb 4, 2022

What each source reports

NVD Score used 9.8

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Record: CVE-2016-2324
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Record: CVE-2016-2324
Updated: 2026-11-02

EUVDEUVD-2016-3408 No score

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Record: EUVD-2016-3408
Updated: 2026-11-03

GitHub AdvisoriesGHSA-p4rj-f9j6-8r9q 9.8

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)...

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Record: GHSA-p4rj-f9j6-8r9q
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-119
Updated: 2026-11-02

OSV 9.8

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Record: CVE-2016-2324
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2016-2324 9.8

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Record: DEBIAN-CVE-2016-2324
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 7 moreShow less

OSVUBUNTU-CVE-2016-2324 9.8

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Record: UBUNTU-CVE-2016-2324
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2016-0119 No score

Updated git packages fix security vulnerability

There is a buffer overflow vulnerability possibly leading to remote code execution in git. It can happen while pushing or cloning a repository with a large filename or a large number of nested trees (CVE-2016-2315, CVE-2016-2324).

The git package has been updated to version 2.7.4, which fixes this issue, as well as several other bugs.

The cgit package bundles git, and its bundled copy of git has also been updated to version 2.7.4.

Record: MGASA-2016-0119
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10099-1 No score

git-2.11.0-1.1 on GA media

These are all security issues fixed in the git-2.11.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10099-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10137-1 No score

cgit-1.0-1.3 on GA media

These are all security issues fixed in the cgit-1.0-1.3 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10137-1
Updated: 2026-11-02

OSVSUSE-SU-2016:0796-1 No score

Security update for git

This update for git fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code (CVE-2016-2315, CVE-2016-2324, bsc#971328).

Record: SUSE-SU-2016:0796-1
Updated: 2026-11-02

OSVSUSE-SU-2016:0798-1 No score

Security update for git

This update for git fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code (CVE-2016-2315, CVE-2016-2324, bsc#971328).

Record: SUSE-SU-2016:0798-1
Updated: 2026-11-02

OSVUSN-2938-1 No score

git vulnerabilities

Laël Cellier discovered that Git incorrectly handled path strings in crafted Git repositories. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking Git. (CVE-2016-2315, CVE-2016-2324)

Record: USN-2938-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`git` Debian:12	before 1:2.8.0~rc3-1	1:2.8.0~rc3-1
`git` Debian:13	before 1:2.8.0~rc3-1	1:2.8.0~rc3-1
`git` Debian:14	before 1:2.8.0~rc3-1	1:2.8.0~rc3-1
`git` Debian:7	before 1:1.7.10.4-1+wheezy3, plus listed versions 1:1.7.10.4-1+wheezy11:1.7.10.4-1+wheezy2	1:1.7.10.4-1+wheezy3
`git` Debian:8	before 1:2.1.4-2.1+deb8u2, plus listed versions 1:2.1.4-2.11:2.1.4-2.1+deb8u1	1:2.1.4-2.1+deb8u2
`git` Mageia:5	before 2.7.4-1.mga5	2.7.4-1.mga5
`cgit` Mageia:5	before 0.12-1.2.mga5	0.12-1.2.mga5
`emacs-git` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`emacs-git-el` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1

Show 158 moreShow less

Affected packages
Package	Affected	Fixed
`git-all` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-cvs` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-daemon` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-debuginfo` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-email` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-gui` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-svn` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`gitk` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`gitweb` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`perl-Git` Red Hat:enterprise_linux:6::client	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`emacs-git` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`emacs-git-el` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-all` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-cvs` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-daemon` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-debuginfo` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-email` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-gui` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-svn` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`gitk` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`gitweb` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`perl-Git` Red Hat:enterprise_linux:6::computenode	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-debuginfo` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`perl-Git` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`emacs-git` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`emacs-git-el` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-all` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-cvs` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-daemon` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-email` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-gui` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-svn` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`gitk` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`gitweb` Red Hat:enterprise_linux:6::server	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-debuginfo` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`perl-Git` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`emacs-git` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`emacs-git-el` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-all` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-cvs` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-daemon` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-email` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-gui` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`git-svn` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`gitk` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`gitweb` Red Hat:enterprise_linux:6::workstation	before 0:1.7.1-4.el6_7.1	0:1.7.1-4.el6_7.1
`emacs-git` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`emacs-git-el` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-all` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-bzr` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-cvs` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-daemon` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-email` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-gui` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-hg` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-p4` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-svn` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`gitk` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`gitweb` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`perl-Git` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`perl-Git-SVN` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`emacs-git` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`emacs-git-el` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-all` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-bzr` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-cvs` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-daemon` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-email` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-gui` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-hg` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-p4` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-svn` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`gitk` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`gitweb` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`perl-Git` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`perl-Git-SVN` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-debuginfo` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`perl-Git` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`emacs-git` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`emacs-git-el` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-all` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-bzr` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-cvs` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-daemon` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-email` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-gui` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-hg` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-p4` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-svn` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`gitk` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`gitweb` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`perl-Git-SVN` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`perl-Git` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`emacs-git` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`emacs-git-el` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-all` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-bzr` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-cvs` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-daemon` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-email` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-gui` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-hg` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-p4` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git-svn` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`gitk` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`gitweb` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`perl-Git-SVN` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-6.el7_2.1	0:1.8.3.1-6.el7_2.1
`git19-emacs-git` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-emacs-git-el` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-git` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-git-all` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-git-cvs` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-git-daemon` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-git-debuginfo` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-git-email` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-git-gui` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-git-svn` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-gitk` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-gitweb` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-perl-Git` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-perl-Git-SVN` Red Hat:rhel_software_collections:2::el6	before 0:1.9.4-4.el6.1	0:1.9.4-4.el6.1
`git19-emacs-git` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-emacs-git-el` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git-all` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git-bzr` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git-cvs` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git-daemon` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git-debuginfo` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git-email` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git-gui` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git-hg` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-git-svn` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-gitk` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-gitweb` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-perl-Git` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git19-perl-Git-SVN` Red Hat:rhel_software_collections:2::el7	before 0:1.9.4-4.el7.1	0:1.9.4-4.el7.1
`git` SUSE:Linux Enterprise Software Development Kit 12	before 1.8.5.6-18.1	1.8.5.6-18.1
`git` SUSE:Linux Enterprise Software Development Kit 12 SP1	before 1.8.5.6-18.1	1.8.5.6-18.1
`git` SUSE:Linux Enterprise Server 12	before 1.8.5.6-18.1	1.8.5.6-18.1
`git` SUSE:Linux Enterprise Server for SAP Applications 12	before 1.8.5.6-18.1	1.8.5.6-18.1
`git` SUSE:Linux Enterprise Server 12 SP1	before 1.8.5.6-18.1	1.8.5.6-18.1
`git` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	before 1.8.5.6-18.1	1.8.5.6-18.1
`git` SUSE:Linux Enterprise Software Development Kit 11 SP4	before 1.7.12.4-0.14.1	1.7.12.4-0.14.1
`git` SUSE:OpenStack Cloud 5	before 1.7.12.4-0.14.1	1.7.12.4-0.14.1
`git` Ubuntu:14.04:LTS	before 1:1.9.1-1ubuntu0.3, plus listed versions 1:1.8.3.2-11:1.8.4.2-11:1.8.4.3-11:1.8.4.4-11:1.8.5-1 Show 9 moreShow less 1:1.8.5.1-11:1.8.5.2-11:1.8.5.2-21:1.8.5.3-11:1.9~rc1-11:1.9.0-11:1.9.1-11:1.9.1-1ubuntu0.11:1.9.1-1ubuntu0.2	1:1.9.1-1ubuntu0.3
`git` openSUSE:Tumbleweed	before 2.11.0-1.1	2.11.0-1.1
`cgit` openSUSE:Tumbleweed	before 1.0-1.3	1.0-1.3

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-2324 is a critical vulnerability (CVSS 9.8) in Git-scm Git, published March 15, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.1%, the 97th percentile. Fixed in git 1:2.8.0~rc3-1.

References

Show 64 moreShow less