CVE-2016-8568
- Source
- https://cve.org/CVERecord?id=CVE-2016-8568
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8568.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-8568
- Downstream
- Related
- Published
- 2017-02-03T15:59:00.523Z
- Modified
- 2026-04-01T23:54:53.801096Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The gitcommitmessage function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.
- References
-
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3JBSNJAXP7JA3TGE2NPNRTD77JXFG4E/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4E77DG5KGQ7L34U75QY7O6NIPKZNQHQJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVUEIG6EESZB6BRU2IE3F5NRUEHMAEKC/
- http://lists.opensuse.org/opensuse-updates/2016-12/msg00075.html
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00114.html
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00103.html
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00110.html
- http://www.securityfocus.com/bid/93466
- https://bugzilla.redhat.com/show_bug.cgi?id=1383211
- https://github.com/libgit2/libgit2/issues/3936
- http://www.openwall.com/lists/oss-security/2016/10/08/7
- https://github.com/libgit2/libgit2/releases/tag/v0.24.3
Affected packages
Git / github.com/libgit2/libgit2
Affected versions
v0.*
v0.1.0
v0.10.0
v0.11.0
v0.12.0
v0.13.0
v0.14.0
v0.15.0
v0.16.0
v0.17.0
v0.18.0
v0.19.0
v0.2.0
v0.20.0
v0.21.0
v0.21.0-rc1
v0.21.0-rc2
v0.21.1
v0.21.2
v0.21.3
v0.21.4
v0.21.5
v0.22.0
v0.22.0-rc1
v0.22.0-rc2
v0.22.1
v0.22.2
v0.22.3
v0.23.0
v0.23.0-rc1
v0.23.0-rc2
v0.23.1
v0.23.2
v0.23.3
v0.23.4
v0.24.0
v0.24.0-rc1
v0.24.1
v0.24.2
v0.24.4
v0.25.0
v0.25.0-rc1
v0.25.0-rc2
v0.25.1
v0.26.0
v0.26.0-rc1
v0.26.0-rc2
v0.26.1
v0.26.2
v0.26.3
v0.26.4
v0.26.5
v0.26.6
v0.26.7
v0.26.8
v0.27.0
v0.27.0-rc1
v0.27.0-rc2
v0.27.0-rc3
v0.27.1
v0.27.10
v0.27.2
v0.27.3
v0.27.4
v0.27.5
v0.27.6
v0.27.7
v0.27.8
v0.27.9
v0.28.0
v0.28.0-rc1
v0.28.1
v0.28.2
v0.28.3
v0.28.4
v0.28.5
v0.3.0
v0.8.0
v0.99.0
v1.*
v1.0.0
v1.0.1
v1.1.0
v1.1.1
v1.2.0
v1.3.0
v1.3.1
v1.3.2
v1.4.0
v1.4.1
v1.4.2
v1.4.3
v1.4.4
v1.4.5
v1.4.6
v1.5.0
v1.5.1
v1.5.2
v1.6.1
v1.6.2
v1.6.3
v1.6.4
v1.6.5
v1.7.0
v1.7.1
v1.7.2
v1.8.0
v1.8.1
v1.8.2
v1.8.2-rc1
v1.8.3
v1.8.4
v1.8.5
v1.9.0
v1.9.1
v1.9.2
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8568.json"
unresolved_ranges
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "23"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "24"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "25"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "42.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "42.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "13.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.0"
}
]
}
]