Out-of-bounds read in libgit2 - CVE-2018-15501

Vulnerability identifier: #VU14546

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-15501

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to out-of-bounds read in ng_pkt in transports/smart_pkt.c in libgit2. A remote attacker can send a specially crafted smart-protocol "ng" packet that lacks a '' byte and cause the service to crash.

libgit2
libgit2-0.27 (Alpine package)
libgit2-1.0 (Alpine package)
libgit2 (Ubuntu package)
libgit2
Fedora
Ubuntu
Opensuse

The vulnerability has been fixed in the versions 0.26.6, 0.27.4.

libgit2 - addressed in versions 0.26.6, 0.27.4
libgit2-1.0 (Alpine package) - update to 1.0.1-r1
libgit2 (Ubuntu package) - addressed in versions 0.19.0-2ubuntu0.4+esm2, 0.24.1-2ubuntu0.2+esm3, 0.26.0+dfsg.1-1.1ubuntu0.2+esm2, 0.28.4+dfsg.1-2ubuntu0.1+esm1, 1.1.0+dfsg.1-4.1ubuntu0.1+esm1, 1.7.2+ds-1ubuntu3.1, 1.9.1+ds-1ubuntu1.1
libgit2 - update to 0.26.7-1.el7

• https://github.com/libgit2/libgit2/releases/tag/v0.26.6
• https://github.com/libgit2/libgit2/releases/tag/v0.27.4

• Denial of service in libgit2
• OpenSUSE Linux update for libgit2
• OpenSUSE Linux update for libgit2
• Out-of-bounds read in libgit2-0.27 (Alpine package)
• Out-of-bounds read in libgit2-1.0 (Alpine package)
• Fedora EPEL 7 update for libgit2
• Ubuntu update for libgit2