Lookup for vulnerable packages by Package URL.
| Purl | pkg:gem/rugged@0.27.0 |
|---|
| Type | gem |
|---|
| Namespace | |
|---|
| Name | rugged |
|---|
| Version | 0.27.0 |
|---|
| Qualifiers |
|
|---|
| Subpath | |
|---|
| Is_vulnerable | true |
|---|
| Next_non_vulnerable_version | 0.26.6 |
|---|
| Latest_non_vulnerable_version | 1.5.0.1 |
|---|
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-8y4k-3zqe-2qhq |
| vulnerability_id |
VCID-8y4k-3zqe-2qhq |
| summary |
Out-of-bounds Read
In the library libgit2, which is used by pygit2, a remote attacker can send a crafted smart-protocol `ng` packet that lacks a `\0` byte to trigger an out-of-bounds read leading to a DoS. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2018-15501
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8y4k-3zqe-2qhq |
|
| 1 |
| url |
VCID-sh5r-zhae-7qau |
| vulnerability_id |
VCID-sh5r-zhae-7qau |
| summary |
Out-of-bounds Read
The libgit2 library, which is used by pygit2, is vulnerable to an integer overflow which leads to an out-of-bound read. An attacker may use this flaw to leak memory addresses or cause a Denial of Service. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2018-10887
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sh5r-zhae-7qau |
|
| 2 |
| url |
VCID-vqs6-suqc-ybc7 |
| vulnerability_id |
VCID-vqs6-suqc-ybc7 |
| summary |
Out-of-bounds Read
A flaw was found in libgit2 which is wrapped by the rugged gem. A missing check
in git_delta_apply function in `delta.c` file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2018-10888
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vqs6-suqc-ybc7 |
|
|
|---|
| Fixing_vulnerabilities |
|
|---|
| Risk_score | null |
|---|
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:gem/rugged@0.27.0 |
|---|