vulnerability
CentOS: (CVE-2016-2315) CESA-2016:0496: git
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Mar 23, 2016 | Jul 6, 2016 | May 5, 2019 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Mar 23, 2016
Added
Jul 6, 2016
Modified
May 5, 2019
Description
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
Solutions
centos-upgrade-emacs-gitcentos-upgrade-emacs-git-elcentos-upgrade-gitcentos-upgrade-git-allcentos-upgrade-git-bzrcentos-upgrade-git-cvscentos-upgrade-git-daemoncentos-upgrade-git-emailcentos-upgrade-git-guicentos-upgrade-git-hgcentos-upgrade-git-p4centos-upgrade-git-svncentos-upgrade-gitkcentos-upgrade-gitwebcentos-upgrade-perl-gitcentos-upgrade-perl-git-svn
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.