CVE-2024-25817

2024-03-0500:00:00

mitre

github.com

cve-2024-25817

buffer overflow

eza 0.18.2

local attackers

arbitrary code

.git/head

.git/refs

.git/objects

AI Score

7.6

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/objects components.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:eza:eza:*:*:*:*:*:*:*:*"
    ],
    "vendor": "eza",
    "product": "eza",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "0.18.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]