CVE-2016-10130

The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by…

published March 24, 2017

CVSS
—
EPSS
2%
Percentile
77.2
In the wild
Unconfirmed
What it is

The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01724 · 77.2th percentile
Published
2017-03-24T15:00Z
EPSS history
Timeline
  • 24 MAR 15:00Z
    The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by…
    cvelistv5