CVE-2016-10129

概要

参考情報

• lists.opensuse.org/opensuse-updates/2017-02/msg00030.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2017-02/msg00036.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2017-02/msg00072.html · Third Party Advisory
• openwall.com/lists/oss-security/2017/01/10/5 · Mailing List
• openwall.com/lists/oss-security/2017/01/11/6 · Mailing List
• securityfocus.com/bid/95339
• libgit2/libgit2 commit 2fdef64 · Issue Tracking
• libgit2/libgit2 commit 84d30d5 · Issue Tracking
• libgit2.github.com/security · Patch

libgit2 のその他の脆弱性

• CVE-2016-10130中 5.9The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to …
• CVE-2016-10128緊急 9.8Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and …
• CVE-2016-8569中 5.5The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereferenc…
• CVE-2016-8568中 5.5The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) …