CVE-2024-25817

ALTO 7.8CVE-2024-25817 · Published 06/03/2024 · updated 17/06/2026

In breve

CVE-2024-25817 è una vulnerabilità ALTO (CVSS 7.8) che riguarda eza (eza.rock).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.27%, superiore al 18.9% delle vulnerabilità.
Correzione: aggiornare a 0.18.2 o successiva.

Package	Affected versions	Patched versions
eza eza.rock	`< 0.18.2`	`0.18.2`

Description

Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/objects components.

References

GitHub Advisory GHSA-3qx3-6hxr-j2ch · Patch
cubeyond.net/blog/my-cves/eza-cve-report · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free