CVE-2016-2315 revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based bu...
CriticalCVSS 9.8
EPSS 17.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/git(Debian:12) | < 1:2.7.0-1 | 1:2.7.0-1 |
| debian/git(Debian:13) | < 1:2.7.0-1 | 1:2.7.0-1 |
| debian/git(Debian:14) | < 1:2.7.0-1 | 1:2.7.0-1 |
| SUSE linux enterprise debuginfo | = 11-sp4 | No fix listed |
| SUSE openstack cloud | = 5 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise server | = 12-sp1 | No fix listed |
| SUSE linux enterprise software development kit | = 11-sp4 | No fix listed |
| SUSE linux enterprise software development kit | = 12 | No fix listed |
| SUSE linux enterprise software development kit | = 12-sp1 | No fix listed |
| suse linux enterprise server | = 12 | No fix listed |
| git-scm git | = 2.7.3 | No fix listed |
References
- Debian Security Tracker CVE-2016-2315 vendor-advisory
- FEDORA-2016-8f164810c3 mailing-list third-party-advisory vendor-advisory
- FEDORA-2016-6554eff611 mailing-list third-party-advisory vendor-advisory
- FEDORA-2016-cee7647200 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2016:0796 mailing-list vendor-advisory
- SUSE-SU-2016:0798 mailing-list vendor-advisory
- openSUSE-SU-2016:0802 mailing-list vendor-advisory
- openSUSE-SU-2016:0803 mailing-list vendor-advisory
- openSUSE-SU-2016:0826 mailing-list vendor-advisory
- openSUSE-SU-2016:0829 mailing-list vendor-advisory
- openSUSE-SU-2016:0831 mailing-list vendor-advisory
- openSUSE-SU-2016:0832 mailing-list vendor-advisory
- openSUSE-SU-2016:0958 mailing-list vendor-advisory
- pastebin.com third-party-advisory
- RHSA-2016:0496 third-party-advisory vendor-advisory
- DSA-3521 third-party-advisory vendor-advisory
- [oss-security] 20160315 server and client side remote code execution through a bu ffer overflow in all git versions before 2.7.1 (unpublished ᴄᴠᴇ-2016-2324 and ᴄᴠᴇ-2016-2315) mailing-list
- www.oracle.com third-party-advisory
- www.oracle.com third-party-advisory
- 84355 third-party-advisory vdb-entry
- 1035290 third-party-advisory vdb-entry
- USN-2938-1 third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- github.com patch third-party-advisory
- raw.githubusercontent.com vendor-advisory
- GLSA-201605-01 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking