Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

Debian 8: DLA-1477-1 Critical: Libgit2 Denial Of Service Vulnerability

debian lts
Calendar Grey August 25, 2018
Dist Debian Esm H88
Libgit2 enhancement tackles several vulnerabilities, notably an out-of-bounds read that could result in a denial of service. Users are advised to update.
CVE-2018-15501 A potential out-of-bounds read when processing a "ng" smart packet might lead to a Denial of Service
Topics%20covered

Topics Covered

security advisory denial of service debian out-of-bounds read libgit2

Summary

CVE-2018-10887
A flaw has been discovered that may lead to an integer overflow which
in turn leads to an out of bound read, allowing to read before the
base object. This might be used to leak memory addresses or cause a
Denial of Service.

CVE-2018-10888
A flaw may lead to an out-of-bound read while reading a binary delta
file. This might result in a Denial of Service.


For Debian 8 "Jessie", these problems have been fixed in version
0.21.1-3+deb8u1.

We recommend that you upgrade your libgit2 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libgit2
Version: 0.21.1-3+deb8u1
CVE ID: CVE-2018-10887 CVE-2018-10888 CVE-2018-15501

Topics%20covered

Topics Covered

security advisory denial of service debian out-of-bounds read libgit2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here