← Voltar para CVEs

CVE-2016-2324

CRITICAL

9.8

Descricao

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado4/8/2016

Ultima modificacao4/12/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

git-scm:gitopensuse:leapopensuse:opensusesuse:linux_enterprise_debuginfosuse:linux_enterprise_serversuse:linux_enterprise_software_development_kitsuse:openstack_cloudsuse:suse_linux_enterprise_server

Fraquezas (CWE)

CWE-119

Referencias

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183147.html(cve@mitre.org)

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179121.html(cve@mitre.org)

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180763.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html(cve@mitre.org)

http://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html(cve@mitre.org)

http://pastebin.com/UX2P2jjg(cve@mitre.org)

http://rhn.redhat.com/errata/RHSA-2016-0496.html(cve@mitre.org)

http://www.debian.org/security/2016/dsa-3521(cve@mitre.org)

http://www.openwall.com/lists/oss-security/2016/03/15/5(cve@mitre.org)

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html(cve@mitre.org)

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html(cve@mitre.org)

http://www.securityfocus.com/bid/84355(cve@mitre.org)

http://www.securitytracker.com/id/1035290(cve@mitre.org)

http://www.ubuntu.com/usn/USN-2938-1(cve@mitre.org)

https://github.com/git/git/commit/de1e67d0703894cb6ea782e36abb63976ab07e60(cve@mitre.org)

https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt(cve@mitre.org)

https://security.gentoo.org/glsa/201605-01(cve@mitre.org)

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183147.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179121.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180763.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html(af854a3a-2127-422b-91ae-364da2661108)

http://pastebin.com/UX2P2jjg(af854a3a-2127-422b-91ae-364da2661108)

http://rhn.redhat.com/errata/RHSA-2016-0496.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2016/dsa-3521(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2016/03/15/5(af854a3a-2127-422b-91ae-364da2661108)

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/84355(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1035290(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-2938-1(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/git/git/commit/de1e67d0703894cb6ea782e36abb63976ab07e60(af854a3a-2127-422b-91ae-364da2661108)

https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/201605-01(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.