Libgit2 Project Libgit2 — known CVE vulnerabilities

Every CVE whose affected-product data names Libgit2 Project Libgit2, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2016-10128 — CVSS 9.8 (critical): Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and…
• CVE-2016-10129 — CVSS 7.5 (high): The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL…
• CVE-2016-10130 — CVSS 5.9 (medium): The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to…
• CVE-2016-8568 — CVSS 5.5 (medium): The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read)…
• CVE-2016-8569 — CVSS 5.5 (medium): The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer…