Maliciously crafted Git server replies can cause DoS on go-git clients
概要
Maliciously crafted Git server replies can cause DoS on go-git clients
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.
Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.
This is a go-git implementation issue and does not affect the upstream git cli.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-49568 golang-github-go-git-go-git
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov