Vulnerabilities > CVE-2023-49568 - Unspecified vulnerability in Go-Git Project Go-Git

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

go-git-project

NVD

Published: 2024-01-12

Updated: 2024-01-22

Summary

A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability. This is a go-git implementation issue and does not affect the upstream git cli.

Vulnerable Configurations

Part	Description	Count
Application	Go-Git_Project GO GIT Project GO GIT 4.0.0 GO GIT Project GO GIT 4.1.0 GO GIT Project GO GIT 4.1.1 GO GIT Project GO GIT 4.2.0 GO GIT Project GO GIT 4.2.1 GO GIT Project GO GIT 4.3.0 GO GIT Project GO GIT 4.3.1 GO GIT Project GO GIT 4.4.0 GO GIT Project GO GIT 4.4.1 GO GIT Project GO GIT 4.5.0 GO GIT Project GO GIT 4.6.0 GO GIT Project GO GIT 4.7.0 GO GIT Project GO GIT 4.7.1 GO GIT Project GO GIT 4.8.0 GO GIT Project GO GIT 4.8.1 GO GIT Project GO GIT 4.9.0 GO GIT Project GO GIT 4.9.1 GO GIT Project GO GIT 4.10.0 GO GIT Project GO GIT 4.11.0 GO GIT Project GO GIT 4.12.0 GO GIT Project GO GIT 4.13.0 GO GIT Project GO GIT 4.13.1 GO GIT Project GO GIT 5.0.0 GO GIT Project GO GIT 5.1.0 GO GIT Project GO GIT 5.2.0 GO GIT Project GO GIT 5.3.0 GO GIT Project GO GIT 5.4.0 GO GIT Project GO GIT 5.4.1 GO GIT Project GO GIT 5.4.2 GO GIT Project GO GIT 5.5.0 GO GIT Project GO GIT 5.5.1 GO GIT Project GO GIT 5.5.2 GO GIT Project GO GIT 5.6.0 GO GIT Project GO GIT 5.6.1 GO GIT Project GO GIT 5.7.0 GO GIT Project GO GIT 5.8.0 GO GIT Project GO GIT 5.8.1 GO GIT Project GO GIT 5.9.0 GO GIT Project GO GIT 5.10.0 GO GIT Project GO GIT 5.10.1	55

References

https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r