Known vulnerabilities in libgit2-24 (Ubuntu package)

Vendor: Canonical Ltd.
Software: libgit2-24 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:libgit2-24_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libgit2-24 (Ubuntu package) libgit2-24 (Ubuntu package) is affected by 7 known vulnerabilities: 1 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86204 - Use of Incorrectly-Resolved Name or Reference
CVE-2020-12279		 CWE-706 Medium
No
No
 Ubuntu Pro 07.02.2024 SB2020042733
SB2024030562
SB2021072794
#VU86203 - Use of Incorrectly-Resolved Name or Reference
CVE-2020-12278		 CWE-706 Medium
No
No
 Ubuntu Pro 07.02.2024 SB2020042733
SB2024030562
SB2021072794
#VU86202 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24575		 CWE-835 Medium
No
No
 Ubuntu Pro 07.02.2024 SB2024020715
SB2024020801
SB2024020863
and 15 more
#VU86201 - Heap-based Buffer Overflow
CVE-2024-24577		 CWE-122 High
No
No
 Ubuntu Pro 07.02.2024 SB2024020715
SB2024020801
SB2024020863
and 29 more
#VU71412 - Configuration
CVE-2023-22742		 CWE-16 Low
No
No
 Ubuntu Pro 22.01.2023 SB2023012216
SB2023032438
SB2023040667
and 4 more
#VU32003 - Out-of-bounds read
CVE-2016-8568		 CWE-125 Low
No
No
 0.24.1-2ubuntu0.2+esm1 03.02.2017 SB2017020304
SB2016120202
SB2016111608
and 7 more
#VU32004 - NULL Pointer Dereference
CVE-2016-8569		 CWE-476 Medium
No
No
 0.24.1-2ubuntu0.2+esm1 03.02.2017 SB2017020305
SB2016120203
SB2016111608
and 7 more