CVE-2016-8568 The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.
MediumCVSS 5.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/cargo(Debian:12) | < 0.17.0-1 | 0.17.0-1 |
| debian/libgit2(Debian:12) | < 0.24.5-1 | 0.24.5-1 |
| debian/libgit2(Debian:13) | < 0.24.5-1 | 0.24.5-1 |
| debian/libgit2(Debian:14) | < 0.24.5-1 | 0.24.5-1 |
| fedoraproject fedora | = 23 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| fedoraproject fedora | = 25 | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| openSUSE leap | = 42.2 | No fix listed |
| opensuse | = 13.2 | No fix listed |
| SUSE linux enterprise | = 12.0 | No fix listed |
| libgit2 project libgit2 | <= 0.24.2 | No fix listed |
| alpine/libgit2(Alpine:v3.10) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.11) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.12) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.13) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.14) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.15) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.16) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.17) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.18) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.19) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.20) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.21) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.22) | < 0.24.3-r0 | 0.24.3-r0 |
Show 12 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/libgit2(Alpine:v3.23) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.24) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.5) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.6) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.7) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.8) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2(Alpine:v3.9) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2-0.27(Alpine:v3.10) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2-1.0(Alpine:v3.13) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2-1.0(Alpine:v3.14) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2-1.1(Alpine:v3.15) | < 0.24.3-r0 | 0.24.3-r0 |
| alpine/libgit2-1.1(Alpine:v3.16) | < 0.24.3-r0 | 0.24.3-r0 |
References
- Debian Security Tracker CVE-2016-8568 vendor-advisory
- openSUSE-SU-2016:3097 third-party-advisory vendor-advisory
- openSUSE-SU-2017:0184 third-party-advisory vendor-advisory
- openSUSE-SU-2017:0195 third-party-advisory vendor-advisory
- openSUSE-SU-2017:0208 third-party-advisory vendor-advisory
- [oss-security] 20161008 Re: CVE request: invalid memory accesses parsing object files in libgit2 mailing-list patch third-party-advisory
- 93466 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking
- github.com issue-tracking patch third-party-advisory
- github.com issue-tracking patch third-party-advisory
- FEDORA-2016-bc51f4636f vendor-advisory
- FEDORA-2016-616a35205b vendor-advisory
- FEDORA-2016-505d7fe198 vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking