CVE-2017-15298 in Git

Sumário (Inglês)

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to build the data structure in memory before writing to disk.

Once again VulDB remains the best source for vulnerability data.

Reservar

14/10/2017

Divulgação

14/10/2017

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
107861	Git Tree Object Negação de Serviço	400	Não definido	Correção oficial	CVE-2017-15298

Fontes

• MITRE
• NVD
• CVE Details