Lucene search
GitHub Advisory DatabaseGHSA-VJJF-3RVG-GV3VHistoryMay 17, 2022 - 4:14 a.m.
Dulwich Buffer Overflow when handling pack files
2022-05-1704:14:09
CWE-119
GitHub Advisory Database
github.com
5
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.068 Low
EPSS
Percentile
93.9%
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
Affected configurations
Node
dulwich_projectdulwichRange<0.9.9
Related
cve
cve
CVE-2015-0838
2015-03-31 14:59:08
ubuntucve
ubuntucve
CVE-2015-0838
2015-03-31 00:00:00
cvelist
cvelist
CVE-2015-0838
2015-03-31 14:00:00
nvd
nvd
CVE-2015-0838
2015-03-31 14:59:08
openvas
openvas
Debian: Security Advisory (DLA-231-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3206-1 (dulwich - security update)
2015-03-28 00:00:00
Debian: Security Advisory (DSA-3206-1)
2015-03-27 00:00:00
debiancve
debiancve
CVE-2015-0838
2015-03-31 14:59:08
nessus
nessus
FreeBSD : Dulwich -- Remote code execution (e426eda9-dae1-11e4-8107-94de806b0af9)
2015-04-20 00:00:00
Debian DLA-231-1 : dulwich security update
2015-05-28 00:00:00
Debian DSA-3206-1 : dulwich - security update
2015-03-30 00:00:00
osv
osv
PYSEC-2015-35
2015-03-31 14:59:00
Dulwich Buffer Overflow when handling pack files
2022-05-17 04:14:09
dulwich - security update
2015-03-28 00:00:00
prion
prion
Buffer overflow
2015-03-31 14:59:00
debian
debian
[SECURITY] [DLA 231-1] dulwich security update
2015-05-27 19:07:07
[SECURITY] [DSA 3206-1] dulwich security update
2015-03-28 13:22:01
[SECURITY] [DSA 3206-1] dulwich security update
2015-03-28 13:22:01
freebsd
freebsd
Dulwich -- Remote code execution
2015-01-07 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3206-1] dulwich security update
2015-04-19 00:00:00
dulwich security vulnerabilities
2015-04-19 00:00:00
mageia
mageia
Updated python-dulwich packages fix security vulnerabilities
2015-04-15 20:22:53
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.068 Low
EPSS
Percentile
93.9%
Related for GHSA-VJJF-3RVG-GV3V