dulwich vulnerabilities (TuxCare)
11 vulnerabilities.
-
dulwichTuxCare Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths 8.7 High -
dulwichTuxCare Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object 7.1 High -
dulwichTuxCare Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths 7.3 High -
dulwichTuxCare Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter 7.3 High -
dulwichTuxCare Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks 7.3 High -
dulwichTuxCare TuxCare security update for dulwich (1 CVE) No score -
dulwichTuxCare Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload 7.5 High -
dulwichTuxCare Dulwich has unbounded memory allocation in receive-pack from crafted thin packs 5.7 Medium -
dulwichTuxCare Dulwich doesn't sanitize commit subjects in `porcelain.format_patch` 3.3 Low -
dulwichTuxCare Dulwich Vulnerable to Command Injection via Merge Driver Path 7.7 High -
dulwichTuxCare Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows 8.8 High