Lucene search

K

GoogleOSV:PYSEC-2015-34

HistoryMar 31, 2015 - 2:59 p.m.

PYSEC-2015-34

2015-03-3114:59:00

Google

osv.dev

10

0.164 Low

EPSS

Percentile

96.0%

The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree.

CPENameOperatorVersion
dulwicheq0.8.0
dulwicheq0.1.0
dulwicheq0.6.2
dulwicheq0.8.3
dulwicheq0.5.0
dulwicheq0.6.0
dulwicheq0.9.7
dulwicheq0.8.7
dulwicheq0.3.2
dulwicheq0.3.3

Rows per page:

1-10 of 331

References

lists.fedoraproject.org/pipermail/package-announce/2015-April/154523.html

lists.fedoraproject.org/pipermail/package-announce/2015-April/154551.html

www.debian.org/security/2015/dsa-3206

www.openwall.com/lists/oss-security/2015/03/21/1

www.openwall.com/lists/oss-security/2015/03/22/26

git.samba.org/?p=jelmer/dulwich.git;a=commitdiff;h=091638be3c89f46f42c3b1d57dc1504af5729176

lists.launchpad.net/dulwich-users/msg00827.html

0.164 Low

EPSS

Percentile

96.0%

Related for OSV:PYSEC-2015-34

nessus4 openvas6 fedora3 nvd1 prion1 debiancve1 github1 cvelist1 ubuntucve1 cve1 debian2 securityvulns2 osv1 mageia1