Vulnerabilities > Libgit2 Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-03-24 | CVE-2016-10130 | Improper Access Control vulnerability in Libgit2 Project Libgit2 0.25.0 The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable. | 4.3 |
| 2017-03-24 | CVE-2016-10129 | NULL Pointer Dereference vulnerability in Libgit2 Project Libgit2 0.25.0 The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line. | 5.0 |
| 2017-03-24 | CVE-2016-10128 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libgit2 Project Libgit2 0.25.0 Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet. | 7.5 |
| 2017-02-03 | CVE-2016-8569 | NULL Pointer Dereference vulnerability in multiple products The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file. | 5.5 |
| 2017-02-03 | CVE-2016-8568 | Out-of-bounds Read vulnerability in multiple products The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file. | 5.5 |