dulwich vulnerabilities (Ubuntu)
12 vulnerabilities.
-
dulwichUbuntu Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths 8.7 High -
dulwichUbuntu Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object 7.1 High -
dulwichUbuntu Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths 7.3 High -
dulwichUbuntu Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter 7.3 High -
dulwichUbuntu Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks 7.3 High -
dulwichUbuntu Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib... 5.3 Medium -
dulwichUbuntu Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload 7.5 High -
dulwichUbuntu Dulwich has unbounded memory allocation in receive-pack from crafted thin packs 5.7 Medium -
dulwichUbuntu Dulwich doesn't sanitize commit subjects in `porcelain.format_patch` 3.3 Low -
dulwichUbuntu Dulwich Vulnerable to Command Injection via Merge Driver Path 7.7 High -
dulwichUbuntu Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows 8.8 High -
dulwichUbuntu Dulwich RCE Vulnerability 9.8 Critical