libgit2 vulnerabilities (Mageia)
15 vulnerabilities.
-
libgit2Mageia libgit2 Shell Command Injection via ssh_libssh2 Backend 8.6 High -
libgit2Mageia libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data 7.5 High -
libgit2Mageia libgit2: HTTP transport can leak credentials to an offsite redirect target 6.5 Medium -
libgit2Mageia libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header 5.3 Medium -
libgit2Mageia libgit2: Submodule path traversal 4.3 Medium -
libgit2Mageia libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend 6.5 Medium -
libgit2Mageia libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add` 8.6 High -
libgit2Mageia libgit2 fails to verify SSH keys by default 5.3 Medium -
libgit2Mageia A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes... 8.8 High -
libgit2Mageia An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2,... 8.8 High -
libgit2Mageia CVE-2019-1348 does not affect BellSoft software 3.3 Low -
libgit2Mageia The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote... 7.5 High -
libgit2Mageia Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart... 9.8 Critical -
libgit2Mageia The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a... 5.5 Medium -
libgit2Mageia The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to... 5.5 Medium