Skip to content
OpenAdvisories

Archive

March 2015

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8

    Dulwich Buffer Overflow when handling pack files

    Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.

  • Critical 9.8

    Dulwich Arbitrary code execution via commit with directory path starting with .git

    The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree.

  • Critical 9.8

    Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command

    The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command.