HOLY SHIT GIT MADE A MISTAKE!!!!

meow · 03-16-2016, 06:00 AM

Server and client side remote code execution through a buffer overflow in all git versions before 2.7.1 (unpublished CVE-2016-2324 and CVE‑2016‑2315).

http://seclists.org/oss-sec/2016/q1/645

pvnk · 03-16-2016, 06:59 AM

Thanks for such a cool share!

Oni · 03-16-2016, 08:01 AM

Glad I don't need to use git for anything.

mothered · 03-16-2016, 11:16 AM

Just goes to show that everything has a vulnerability or security risk to some degree.

Something of this nature would be (or should be) fixed/patched pretty quick.

817_091_278 · 10-09-2016, 11:58 PM

The owners are humans - and humans make mistake. This isn't shocking.

pvnk · 10-10-2016, 09:46 PM

(10-09-2016, 11:58 PM)817_091_278 Wrote: The owners are humans - and humans make mistake. This isn't shocking.

I'm pretty electrified to be quite honest.

Inori · 10-10-2016, 09:48 PM

Git is usually my svc of choice, but I don't use it in any production code so this doesn't affect me. Nice share though.

In terms of the logistics, buffer attacks usually take forever to notice. In the case of Heartbleed with OpenSSL for example, it took 20-something years to find and patch.

HOLY SHIT GIT MADE A MISTAKE!!!!
Author Message