Описание
go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 5.16.2-1 |
| esm-apps/jammy | released | 5.4.2-3ubuntu0.1~esm1 |
| esm-apps/noble | released | 5.4.2-4ubuntu0.24.04.3+esm2 |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | needed | |
| noble | needed | |
| oracular | ignored | end of life, was needs-triage |
| plucky | ignored | end of life, was needs-triage |
| questing | not-affected | 5.14.0-1 |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability.
go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients. Users running versions of go-git from v4 and above are recommended to upgrade to v5.13 in order to mitigate this vulnerability.
go-git clients vulnerable to DoS via maliciously crafted Git server replies
go-git is a highly extensible git implementation library written in pu ...
go-git clients vulnerable to DoS via maliciously crafted Git server replies
EPSS
7.5 High
CVSS3