CVE-2008-3546
- State
- Published
- Severity
- Not scored
- Published
- Aug 7, 2008
- Updated
- Aug 7, 2024
- Reserved
- Aug 7, 2008
Description
Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20080812 rPSA-2008-0253-1 git gitwebmailing-list
- http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.5.6.4.txt
- 32029third-party-advisory
- http://wiki.rpath.com/Advisories:rPSA-2008-0253
- git-multiple-bo(44217)vdb-entry
- 33964third-party-advisory
- https://issues.rpath.com/browse/RPL-2707
- 31347third-party-advisory
- GLSA-200809-16vendor-advisory
- DSA-1637vendor-advisory
- [git] 20080716 [PATCH] Fix buffer overflow in git diffmailing-list
- FEDORA-2008-9080vendor-advisory
- 32384third-party-advisory
- 30549vdb-entry
- ADV-2008-2306vdb-entry
- 1020627vdb-entry
- 31780third-party-advisory
- USN-723-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.