Vendor/product archive

dulwich_project / dulwich CVEs

Beta · best-effort

3 CVEs tagged to dulwich_project / dulwich — 1 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dulwich_project vendor archive

CVE-2017-16228

Published Oct 29, 2017

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a relat…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2015-0838

Published Mar 31, 2015

Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2014-9706

Published Mar 31, 2015

The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, wh…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1