libgit2 vulnerabilities (Debian)
22 vulnerabilities.
-
libgit2Debian libgit2 Shell Command Injection via ssh_libssh2 Backend 8.6 High -
libgit2Debian libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data 7.5 High -
libgit2Debian libgit2: HTTP transport can leak credentials to an offsite redirect target 6.5 Medium -
libgit2Debian libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header 5.3 Medium -
libgit2Debian libgit2: Submodule path traversal 4.3 Medium -
libgit2Debian libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend 6.5 Medium -
libgit2Debian libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add` 8.6 High -
libgit2Debian libgit2 is vulnerable to a denial of service attack in `git_revparse_single` 7.5 High -
libgit2Debian libgit2 fails to verify SSH keys by default 5.3 Medium -
libgit2Debian An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles... 9.8 Critical -
libgit2Debian An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles... 9.8 Critical -
libgit2Debian In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote... 7.5 High -
libgit2Debian A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in... 6.5 Medium -
libgit2Debian A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign... 8.1 High -
libgit2Debian Incorrect returning of an error code in the index.c:read_entry() function leads to a double free... 6.5 Medium -
libgit2Debian Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix... 6.5 Medium -
libgit2Debian The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1... 5.9 Medium -
libgit2Debian The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote... 7.5 High -
libgit2Debian Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart... 9.8 Critical -
libgit2Debian The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a... 5.5 Medium -
libgit2Debian The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to... 5.5 Medium -
libgit2Debian JGit Improper Input Validation vulnerability 9.8 Critical