CVE-2016-2315
Fixed in a distro release EPSS 17%
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
Products: suse linux_enterprise_debuginfo, suse openstack_cloud, opensuse leap, opensuse, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, suse_linux_enterprise_server, git-scm git
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | git | 1:2.7.0-1 |
| Debian 13 | git | 1:2.7.0-1 |
| Debian 14 | git | 1:2.7.0-1 |
| Debian 7 | git | 1:1.7.10.4-1+wheezy3 |
| Debian 8 | git | 1:2.1.4-2.1+deb8u2 |
| Red Hat Enterprise Linux 6 | emacs-git | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | emacs-git-el | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | git | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | git-all | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | git-cvs | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | git-daemon | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | git-debuginfo | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | git-email | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | git-gui | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | git-svn | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | gitk | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | gitweb | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 6 | perl-Git | 0:1.7.1-4.el6_7.1 |
| Red Hat Enterprise Linux 7 | emacs-git | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | emacs-git-el | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-all | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-bzr | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-cvs | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-daemon | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-debuginfo | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-email | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-gui | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-hg | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-p4 | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | git-svn | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | gitk | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | gitweb | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | perl-Git | 0:1.8.3.1-6.el7_2.1 |
| Red Hat Enterprise Linux 7 | perl-Git-SVN | 0:1.8.3.1-6.el7_2.1 |
| Red Hat rhel software collections 2 | git19-emacs-git | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-emacs-git | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-emacs-git-el | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-emacs-git-el | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-git | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-git | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-git-all | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-git-all | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-git-bzr | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-git-cvs | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-git-cvs | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-git-daemon | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-git-daemon | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-git-debuginfo | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-git-debuginfo | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-git-email | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-git-email | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-git-gui | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-git-gui | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-git-hg | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-git-svn | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-git-svn | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-gitk | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-gitk | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-gitweb | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-gitweb | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-perl-Git | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-perl-Git | 0:1.9.4-4.el7.1 |
| Red Hat rhel software collections 2 | git19-perl-Git-SVN | 0:1.9.4-4.el6.1 |
| Red Hat rhel software collections 2 | git19-perl-Git-SVN | 0:1.9.4-4.el7.1 |
| SUSE Linux Enterprise Server 12 | git | 1.8.5.6-18.1 |
| SUSE Linux Enterprise Server 12 SP1 | git | 1.8.5.6-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | git | 1.8.5.6-18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | git | 1.8.5.6-18.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | git | 1.7.12.4-0.14.1 |
| SUSE Linux Enterprise Software Development Kit 12 | git | 1.8.5.6-18.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | git | 1.8.5.6-18.1 |
| SUSE OpenStack Cloud 5 | git | 1.7.12.4-0.14.1 |
| Ubuntu 14.04 LTS | git | 1:1.9.1-1ubuntu0.3 |
| openSUSE Tumbleweed | cgit | 1.0-1.3 |
| openSUSE Tumbleweed | git | 2.11.0-1.1 |