VulnerableCode Package Details - pkg:alpm/archlinux/libgit2@1:0.24.3-1

Search for packages

Vulnerability	Summary	Fixed by
VCID-bejf-17ah-tybt Aliases: CVE-2016-10128	Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.	1:0.24.6-1 Affected by 0 other vulnerabilities.
VCID-rvbe-y541-nyh7 Aliases: CVE-2016-10129	The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line.	1:0.24.6-1 Affected by 0 other vulnerabilities.
VCID-xab7-k14p-uqbx Aliases: CVE-2016-10130	The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.	1:0.24.6-1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-bejf-17ah-tybt
Aliases:
CVE-2016-10128

Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet.

1:0.24.6-1
Affected by 0 other vulnerabilities.

VCID-rvbe-y541-nyh7
Aliases:
CVE-2016-10129

The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line.

1:0.24.6-1
Affected by 0 other vulnerabilities.

VCID-xab7-k14p-uqbx
Aliases:
CVE-2016-10130

The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.

1:0.24.6-1
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
VCID-tkgy-cec8-dfdy	The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.	CVE-2016-8569
VCID-yq57-g8j1-kfeu	The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.	CVE-2016-8568

Vulnerability

Summary

Aliases

VCID-tkgy-cec8-dfdy

The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.

CVE-2016-8569

VCID-yq57-g8j1-kfeu

The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.

CVE-2016-8568

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T18:27:23.125355+00:00	Arch Linux Importer	Fixing	VCID-yq57-g8j1-kfeu	https://security.archlinux.org/AVG-45	38.0.0
2026-04-01T18:27:23.100635+00:00	Arch Linux Importer	Fixing	VCID-tkgy-cec8-dfdy	https://security.archlinux.org/AVG-45	38.0.0
2026-04-01T18:26:18.501324+00:00	Arch Linux Importer	Affected by	VCID-bejf-17ah-tybt	https://security.archlinux.org/AVG-131	38.0.0
2026-04-01T18:26:18.477693+00:00	Arch Linux Importer	Affected by	VCID-rvbe-y541-nyh7	https://security.archlinux.org/AVG-131	38.0.0
2026-04-01T18:26:18.454749+00:00	Arch Linux Importer	Affected by	VCID-xab7-k14p-uqbx	https://security.archlinux.org/AVG-131	38.0.0