Integer Overflow

2023-01-1820:22:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

git

integer overflow

vulnerability

commit formatting

software

padding operators

memcpy

export-subst mechanism

0.003 Low

EPSS

Percentile

69.1%

JSON

git is vulnerable to integer overflows. When processing the padding operators, there is a integer overflow in pretty.c::format_and_pad_commit() where a size_t is stored improperly as an int, and then added as an offset to a memcpy(). This overflow can be triggered directly by a user running a command which invokes the commit formatting machinery (e.g., git log --format=...). It may also be triggered indirectly through git archive via the export-subst mechanism.

CPENameOperatorVersion
git:3.14eq2.31.1-r1
git:3.14eq2.32.3-r0
git:3.14eq2.32.4-r0
git:3.14eq2.32.1-r0
git:3.14eq2.32.0-r0
git:3.14eq2.32.2-r0
git:3.16eq2.36.2-r0
git:3.16eq2.36.3-r0
git:3.16eq2.36.1-r0
git:3.16eq2.36.0-r0

Name	Operator	Version
git:3.14	eq	2.31.1-r1
git:3.14	eq	2.32.3-r0
git:3.14	eq	2.32.4-r0
git:3.14	eq	2.32.1-r0
git:3.14	eq	2.32.0-r0
git:3.14	eq	2.32.2-r0
git:3.16	eq	2.36.2-r0
git:3.16	eq	2.36.3-r0
git:3.16	eq	2.36.1-r0
git:3.16	eq	2.36.0-r0