CVE-2018-8098 in libgit2

Resumen (Inglés)

Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service (out-of-bounds read) via a crafted repository index file.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2018-03-13

Divulgación

2018-03-13

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
114491	libgit2 index.c read_entry desbordamiento de búfer	190	No está definido	Arreglo oficial	CVE-2018-8098

Fuentes

• MITRE
• NVD
• CVE Details