CVE-2016-8568

概要

参考情報

• lists.opensuse.org/opensuse-updates/2016-12/msg00075.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2017-01/msg00103.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2017-01/msg00110.html · Third Party Advisory
• lists.opensuse.org/opensuse-updates/2017-01/msg00114.html · Third Party Advisory
• openwall.com/lists/oss-security/2016/10/08/7 · Mailing List
• securityfocus.com/bid/93466 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• libgit2/libgit2 · Issue Tracking
• libgit2/libgit2 release v0.24.3 · Issue Tracking
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4E77DG5KGQ7L34U75QY7O6NIPKZNQHQJ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3JBSNJAXP7JA3TGE2NPNRTD77JXFG4E
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVUEIG6EESZB6BRU2IE3F5NRUEHMAEKC

libgit2 のその他の脆弱性

• CVE-2016-10130中 5.9The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to …
• CVE-2016-10129高 7.5The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL …
• CVE-2016-10128緊急 9.8Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and …
• CVE-2016-8569中 5.5The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereferenc…