Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a Git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to build the data structure in memory before writing to disk.
{ "binaries": [ { "binary_name": "git", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-all", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-arch", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-bzr", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-core", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-cvs", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-daemon-run", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-daemon-sysvinit", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-doc", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-el", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-email", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-gui", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-man", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-mediawiki", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "git-svn", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "gitk", "binary_version": "1:1.9.1-1ubuntu0.10" }, { "binary_name": "gitweb", "binary_version": "1:1.9.1-1ubuntu0.10" } ], "availability": "No subscription required", "ubuntu_priority": "low" }
{ "binaries": [ { "binary_name": "git", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-all", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-arch", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-core", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-cvs", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-daemon-run", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-daemon-sysvinit", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-doc", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-el", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-email", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-gui", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-man", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-mediawiki", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "git-svn", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "gitk", "binary_version": "1:2.7.4-0ubuntu1.6" }, { "binary_name": "gitweb", "binary_version": "1:2.7.4-0ubuntu1.6" } ], "availability": "No subscription required", "ubuntu_priority": "low" }
{ "binaries": [ { "binary_name": "git", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-all", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-cvs", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-daemon-run", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-daemon-sysvinit", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-dbgsym", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-doc", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-el", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-email", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-gui", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-man", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-mediawiki", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "git-svn", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "gitk", "binary_version": "1:2.17.0-1ubuntu1" }, { "binary_name": "gitweb", "binary_version": "1:2.17.0-1ubuntu1" } ], "availability": "No subscription required", "ubuntu_priority": "low" }