Skip to content
OpenAdvisories
Unscored USN-2938-1 2 CVEs

git vulnerabilities

Published Mar 21, 2016 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Laël Cellier discovered that Git incorrectly handled path strings in
crafted Git repositories. A remote attacker could use this issue to cause
a denial of service or possibly execute arbitrary code with the
privileges of the user invoking Git. (CVE-2016-2315, CVE-2016-2324)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS git 1:1.9.1-1ubuntu0.3

Vulnerabilities 2

  • Unscored —
    CVE-2016-2315 EPSS 17%

    revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary …

    git git Debian Ubuntu
  • Unscored —
    CVE-2016-2324 EPSS 18%

    Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) m…

    git git Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2016-2315
  • report
    https://ubuntu.com/security/CVE-2016-2324