Описание
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.
EPSS
7.5 High
CVSS3
Дефекты
Связанные уязвимости
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.
gitoxide before 0.69.0 contains unchecked array indexing in delta appl ...
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.
Уязвимость функции apply() библиотеки gix-pack, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.5 High
CVSS3