Max CVSS | 5.8 | Min CVSS | 4.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2018-10887 | 5.8 |
A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read befo
|
15-02-2024 - 20:59 | 10-07-2018 - 14:29 | |
CVE-2018-15501 | 5.0 |
In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that lacks a '\0' byte to trigger an out-of-bounds read that leads to DoS.
|
11-05-2022 - 20:59 | 18-08-2018 - 02:29 | |
CVE-2018-10888 | 4.3 |
A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.
|
19-04-2022 - 16:09 | 10-07-2018 - 14:29 |