CVE-2018-15501 — Out-of-bounds Read in Libgit2

CWE-125 — Out-of-bounds Read9 documents7 sources
Severity
7.5HIGHNVD
EPSS
1.6%
top 18.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Libgit2Debian Libgit2Debian Linux
Timeline
PublishedAug 18
Latest updateMay 12

Description

In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that lacks a '\0' byte to trigger an out-of-bounds read that leads to DoS.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶debiandebian/libgit2< libgit2 0.27.4+dfsg.1-0.1 (bookworm)
▶NVDlibgit2/libgit20.27.0 — 0.27.4+1
▶Debianlibgit2/libgit2< 0.27.4+dfsg.1-0.1+3

Also affects: Debian Linux 8.0, 9.0

Patches

Patch: bugs.chromium.org ↗Patch: bugzilla.suse.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-432h-4cw6-prpw: In ng_pkt in transports/smart_pkt↗2022-05-12
▶
CVEList
CVE-2018-15501: In ng_pkt in transports/smart_pkt↗2018-08-18
▶
OSV
CVE-2018-15501: In ng_pkt in transports/smart_pkt↗2018-08-18
▶

📋Vendor Advisories

2
Red Hat
libgit2: out-of-bounds reads when processing smart-protocol ng packets↗2018-08-07
▶
Debian
CVE-2018-15501: libgit2 - In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0...↗2018
▶

💬Community

3
Bugzilla
CVE-2018-15501 libgit2: out-of-bounds reads when processing smart-protocol ng packets [fedora-all]↗2018-08-13
▶
Bugzilla
CVE-2018-15501 libgit2: out-of-bounds reads when processing smart-protocol ng packets [epel-all]↗2018-08-13
▶
Bugzilla
CVE-2018-15501 libgit2: out-of-bounds reads when processing smart-protocol ng packets↗2018-08-13
▶