CVE-2018-10888

A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.

Affected products

Alt Linux, Suse, Libgit2

libgit2

< 0.27.3

Fix

Available

CVSS 3.1

6.5 MEDIUM

EPSS

1.8% (77th percentile)

Weakness

CWE-20, CWE-125

NVD status

Modified

Published

2018-07-10

No exploit for CVE-2018-10888 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.