dulwich vulnerabilities (Debian)
14 vulnerabilities.
-
dulwichDebian Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation 8.6 High -
dulwichDebian Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object 7.1 High -
dulwichDebian Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths 7.3 High -
dulwichDebian Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter 7.3 High -
dulwichDebian Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks 7.3 High -
dulwichDebian Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib... 5.3 Medium -
dulwichDebian Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload 7.5 High -
dulwichDebian Dulwich has unbounded memory allocation in receive-pack from crafted thin packs 5.7 Medium -
dulwichDebian Dulwich doesn't sanitize commit subjects in `porcelain.format_patch` 3.3 Low -
dulwichDebian Dulwich Vulnerable to Command Injection via Merge Driver Path 7.7 High -
dulwichDebian Dulwich RCE Vulnerability 9.8 Critical -
dulwichDebian Dulwich Buffer Overflow when handling pack files 7.5 High -
dulwichDebian Dulwich Arbitrary code execution via commit with directory path starting with .git 7.5 High -
dulwichDebian JGit Improper Input Validation vulnerability 9.8 Critical