libgit2 kayıtları
libgit2 üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %9,1
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-706 Use of Incorrectly-Resolved Name or Reference2
- CWE-20 Improper Input Validation2
- CWE-190 Integer Overflow or Wraparound1
- CWE-194 Unexpected Sign Extension1
- CWE-122 Heap-based Buffer Overflow1
- CWE-347 Improper Verification of Cryptographic Signature1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
62Bu hafta | CVE-2014-9390Silahlaştırılmış | Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial beforemercurial · mercurial · CWE-20 | Kritik9,8 | — | %75,6 | 11 Şub 2020 |
41Planlayın | CVE-2020-12278İstismar yok | An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0.libgit2 · libgit2 · CWE-706 | Kritik9,8 | — | %5,2 | 27 Nis 2020 |
41Planlayın | CVE-2020-12279İstismar yok | An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0.libgit2 · libgit2 · CWE-706 | Kritik9,8 | — | %5,2 | 27 Nis 2020 |
39İzleyin | CVE-2024-24577İstismar yok | libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`libgit2 · libgit2 · CWE-122 | Kritik9,8 | — | %1,5 | 6 Şub 2024 |
33İzleyin | CVE-2018-10887İstismar yok | A flaw was found in libgit2 before version 0.27.3.libgit2 · libgit2 · CWE-194 | Yüksek8,1 | — | %2,1 | 10 Tem 2018 |
31İzleyin | CVE-2018-15501İstismar yok | In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "libgit2 · libgit2 · CWE-125 | Yüksek7,5 | — | %4,4 | 17 Ağu 2018 |
30İzleyin | CVE-2024-24575İstismar yok | libgit2 is vulnerable to a denial of service attack in `git_revparse_single`libgit2 · libgit2 · CWE-400 | Yüksek7,5 | — | %1,4 | 6 Şub 2024 |
27İzleyin | CVE-2018-10888İstismar yok | A flaw was found in libgit2 before version 0.27.3.libgit2 · libgit2 · CWE-20 | Orta6,5 | — | %1,8 | 10 Tem 2018 |
26İzleyin | CVE-2018-8098İstismar yok | Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attlibgit2 · libgit2 · CWE-190 | Orta6,5 | — | %1,4 | 13 Mar 2018 |
26İzleyin | CVE-2018-8099İstismar yok | Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows an libgit2 · libgit2 · CWE-415 | Orta6,5 | — | %1,4 | 13 Mar 2018 |
23İzleyin | CVE-2023-22742İstismar yok | libgit2 fails to verify SSH keys by defaultlibgit2 · libgit2 · CWE-347 | Orta5,9 | — | %0,6 | 20 Oca 2023 |
- CVE-2014-939062Bu hafta
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before
KritikCVSS 9,8SilahlaştırılmışEPSS %76mercurial · mercurial11 Şub 2020
- CVE-2020-1227841Planlayın
An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0.
KritikCVSS 9,8İstismar yokEPSS %5libgit2 · libgit227 Nis 2020
- CVE-2020-1227941Planlayın
An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0.
KritikCVSS 9,8İstismar yokEPSS %5libgit2 · libgit227 Nis 2020
- CVE-2024-2457739İzleyin
libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`
KritikCVSS 9,8İstismar yokEPSS %2libgit2 · libgit26 Şub 2024
- CVE-2018-1088733İzleyin
A flaw was found in libgit2 before version 0.27.3.
YüksekCVSS 8,1İstismar yokEPSS %2libgit2 · libgit210 Tem 2018
- CVE-2018-1550131İzleyin
In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "
YüksekCVSS 7,5İstismar yokEPSS %4libgit2 · libgit217 Ağu 2018
- CVE-2024-2457530İzleyin
libgit2 is vulnerable to a denial of service attack in `git_revparse_single`
YüksekCVSS 7,5İstismar yokEPSS %1libgit2 · libgit26 Şub 2024
- CVE-2018-1088827İzleyin
A flaw was found in libgit2 before version 0.27.3.
OrtaCVSS 6,5İstismar yokEPSS %2libgit2 · libgit210 Tem 2018
- CVE-2018-809826İzleyin
Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an att
OrtaCVSS 6,5İstismar yokEPSS %1libgit2 · libgit213 Mar 2018
- CVE-2018-809926İzleyin
Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows an
OrtaCVSS 6,5İstismar yokEPSS %1libgit2 · libgit213 Mar 2018
- CVE-2023-2274223İzleyin
libgit2 fails to verify SSH keys by default
OrtaCVSS 5,9İstismar yokEPSS %1libgit2 · libgit220 Oca 2023