CVE-2018-15501

In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that…

published August 18, 2018

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that lacks a '\0' byte to trigger an out-of-bounds read that leads to DoS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04373 · 91.2th percentile
Published
2018-08-18T02:00Z
EPSS history
Timeline
  • 18 AUG 02:00Z
    In ng_pkt in transports/smart_pkt.c in libgit2 before 0.26.6 and 0.27.x before 0.27.4, a remote attacker can send a crafted smart-protocol "ng" packet that…
    cvelistv5