ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-2315

—
CVSS 3.1
9.8 critical
EPSS
17%p97
Published
()
Modified
Description

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.

Vendors
suseopensusegit-scm
Products
linux enterprise debuginfo, openstack cloud, leap, opensuse, linux enterprise server, linux enterprise software development kit, suse linux enterprise server, git
Weakness
CWE-119
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (17.3%)

In the news

No ingested article mentions this CVE yet.