7.5

CVE-2008-3546

Exploit

Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep.

Data is provided by the National Vulnerability Database (NVD)
Git ≫ Git Version1.5.5.3
   Linux ≫ Parduslinux Version2007
   Linux ≫ Parduslinux Version2008
Git ≫ Git Version1.5.5.3 Updater1
   Linux ≫ Parduslinux Version2007
   Linux ≫ Parduslinux Version2008
Git ≫ Git Version1.5.5.4
   Linux ≫ Parduslinux Version2007
   Linux ≫ Parduslinux Version2008
Git ≫ Git Version1.5.6.1
   Linux ≫ Parduslinux Version2007
   Linux ≫ Parduslinux Version2008
Git ≫ Git Version1.5.6.2
   Linux ≫ Parduslinux Version2007
   Linux ≫ Parduslinux Version2008
Git ≫ Git Version1.5.6.3
   Linux ≫ Parduslinux Version2007
   Linux ≫ Parduslinux Version2008
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.76% 0.82
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.