Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5v2g-4955-9qfh

Опубликовано: 28 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.

EPSS

Процентиль: 29%
0.00351
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-248

Связанные уязвимости

CVSS3: 7.5
ubuntu
23 дня назад

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.

CVSS3: 7.5
nvd
23 дня назад

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.

msrc
19 дней назад

gitoxide before 0.69.0 Denial of Service via gix-pack

CVSS3: 7.5
debian
23 дня назад

gitoxide before 0.69.0 contains unchecked array indexing in delta appl ...

CVSS3: 7.5
fstec
5 месяцев назад

Уязвимость функции apply() библиотеки gix-pack, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 29%
0.00351
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-248