libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to `git_revparse_single` can cause the function to enter an infinite loop, potentially causing a Denial of Service attack in the calling application. The revparse function in `src/libgit2/revparse.c` uses a loop to parse the user-provided spec string. There is an edge-case during parsing that allows a bad actor to force the loop conditions to access arbitrary memory. Potentially, this could also leak memory if the extracted rev spec is reflected back to the attacker. As such, libgit2 versions before 1.4.0 are not affected. Users should upgrade to version 1.6.5 or 1.7.2.

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-401f10a92f advisory.

    - Update the git2 crate to version 0.18.2.
    - Update the libgit2-sys crate to version 0.16.2.

    Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2     to address CVE-2024-24575 and CVE-2024-24577.

    Since the libgit2 bindings cause applications that use them to statically link libgit2, this update also     includes rebuilds of all affected applications.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2584-1 advisory.

    Update to 1.7.2:

    Security fixes:

    - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660)
    - CVE-2024-24575: Fixed potential infinite loop condition in git_revparse_single() (bsc#1219664)

    Other fixes:
    - A bug in the smart transport negotiation could have caused an out-of-bounds read when a remote server     did not advertise capabilities.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-53685bdcb6 advisory.

    - Update the git2 crate to version 0.18.2.
    - Update the libgit2-sys crate to version 0.16.2.

    Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2     to address CVE-2024-24575 and CVE-2024-24577.

    Since the libgit2 bindings cause applications that use them to statically link libgit2, this update also     includes rebuilds of all affected applications.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-566 advisory.

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid     API, allowing to build Git functionality into your application. Using well-crafted inputs to     `git_revparse_single` can cause the function to enter an infinite loop, potentially causing a Denial of     Service attack in the calling application. The revparse function in `src/libgit2/revparse.c` uses a loop     to parse the user-provided spec string. There is an edge-case during parsing that allows a bad actor to     force the loop conditions to access arbitrary memory. Potentially, this could also leak memory if the     extracted rev spec is reflected back to the attacker. As such, libgit2 versions before 1.4.0 are not     affected. Users should upgrade to version 1.6.5 or 1.7.2. (CVE-2024-24575)

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid     API, allowing to build Git functionality into your application. Using well-crafted inputs to     `git_index_add` can cause heap corruption that could be leveraged for arbitrary code execution. There is     an issue in the `has_dir_name` function in `src/libgit2/index.c`, which frees an entry that should not be     freed. The freed entry is later used and overwritten with potentially bad actor-controlled data leading to     controlled heap corruption. Depending on the application that uses libgit2, this could lead to arbitrary     code execution. This issue has been patched in version 1.6.5 and 1.7.2. (CVE-2024-24577)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of rust installed on the remote host is prior to 1.68.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2496 advisory.

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid     API, allowing to build Git functionality into your application. Using well-crafted inputs to     `git_revparse_single` can cause the function to enter an infinite loop, potentially causing a Denial of     Service attack in the calling application. The revparse function in `src/libgit2/revparse.c` uses a loop     to parse the user-provided spec string. There is an edge-case during parsing that allows a bad actor to     force the loop conditions to access arbitrary memory. Potentially, this could also leak memory if the     extracted rev spec is reflected back to the attacker. As such, libgit2 versions before 1.4.0 are not     affected. Users should upgrade to version 1.6.5 or 1.7.2. (CVE-2024-24575)

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid     API, allowing to build Git functionality into your application. Using well-crafted inputs to     `git_index_add` can cause heap corruption that could be leveraged for arbitrary code execution. There is     an issue in the `has_dir_name` function in `src/libgit2/index.c`, which frees an entry that should not be     freed. The freed entry is later used and overwritten with potentially bad actor-controlled data leading to     controlled heap corruption. Depending on the application that uses libgit2, this could lead to arbitrary     code execution. This issue has been patched in version 1.6.5 and 1.7.2. (CVE-2024-24577)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-541 advisory.

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid     API, allowing to build Git functionality into your application. Using well-crafted inputs to     `git_revparse_single` can cause the function to enter an infinite loop, potentially causing a Denial of     Service attack in the calling application. The revparse function in `src/libgit2/revparse.c` uses a loop     to parse the user-provided spec string. There is an edge-case during parsing that allows a bad actor to     force the loop conditions to access arbitrary memory. Potentially, this could also leak memory if the     extracted rev spec is reflected back to the attacker. As such, libgit2 versions before 1.4.0 are not     affected. Users should upgrade to version 1.6.5 or 1.7.2. (CVE-2024-24575)

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid     API, allowing to build Git functionality into your application. Using well-crafted inputs to     `git_index_add` can cause heap corruption that could be leveraged for arbitrary code execution. There is     an issue in the `has_dir_name` function in `src/libgit2/index.c`, which frees an entry that should not be     freed. The freed entry is later used and overwritten with potentially bad actor-controlled data leading to     controlled heap corruption. Depending on the application that uses libgit2, this could lead to arbitrary     code execution. This issue has been patched in version 1.6.5 and 1.7.2. (CVE-2024-24577)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6678-1 advisory.

    It was discovered that libgit2 mishandled equivalent filenames on NTFS partitions. If a user or automated     system were tricked into cloning a specially crafted repository, an attacker could possibly use this issue     to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
    (CVE-2020-12278, CVE-2020-12279)

    It was discovered that libgit2 did not perform certificate checking by default. An attacker could possibly     use this issue to perform a machine-in-the-middle attack. This issue only affected Ubuntu 16.04 LTS,     Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2023-22742)

    It was discovered that libgit2 could be made to run into an infinite loop. An attacker could possibly use     this issue to cause a denial of service. This issue only affected Ubuntu 23.10. (CVE-2024-24575)

    It was discovered that libgit2 did not properly manage memory. An attacker could possibly use this issue     to cause a denial of service or execute arbitrary code. (CVE-2024-24577)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-993d3a78dd advisory.

    - Update the git2 crate to version 0.18.2.
    - Update the libgit2-sys crate to version 0.16.2.

    Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2     to address CVE-2024-24575 and CVE-2024-24577.

    Since the libgit2 bindings cause applications that use them to statically link libgit2, this update also     includes rebuilds of all affected applications.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-8ba389815f advisory.

    - Update the git2 crate to version 0.18.2.
    - Update the libgit2-sys crate to version 0.16.2.

    Version 0.16.2 of the libgit2-sys crate includes an update of the bundled copy of libgit2 to version 1.7.2     to address CVE-2024-24575 and CVE-2024-24577.

    Since the libgit2 bindings cause applications that use them to statically link libgit2, this update also     includes rebuilds of all affected applications.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-605004a28e advisory.

    Update to 1.6.5

    Resolves: CVE-2024-24577     Resolves: CVE-2024-24575

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a7a3c8ccdd advisory.

    Update to 1.6.5

    Resolves: CVE-2024-24577     Resolves: CVE-2024-24575

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-92bac3b909 advisory.

    Update to 1.7.2

    Resolves: CVE-2024-24577     Resolves: CVE-2024-24575

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5619 advisory.

  - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid     API, allowing to build Git functionality into your application. Using well-crafted inputs to     `git_revparse_single` can cause the function to enter an infinite loop, potentially causing a Denial of     Service attack in the calling application. The revparse function in `src/libgit2/revparse.c` uses a loop     to parse the user-provided spec string. There is an edge-case during parsing that allows a bad actor to     force the loop conditions to access arbitrary memory. Potentially, this could also leak memory if the     extracted rev spec is reflected back to the attacker. As such, libgit2 versions before 1.4.0 are not     affected. Users should upgrade to version 1.6.5 or 1.7.2. (CVE-2024-24575)

  - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid     API, allowing to build Git functionality into your application. Using well-crafted inputs to     `git_index_add` can cause heap corruption that could be leveraged for arbitrary code execution. There is     an issue in the `has_dir_name` function in `src/libgit2/index.c`, which frees an entry that should not be     freed. The freed entry is later used and overwritten with potentially bad actor-controlled data leading to     controlled heap corruption. Depending on the application that uses libgit2, this could lead to arbitrary     code execution. This issue has been patched in version 1.6.5 and 1.7.2. (CVE-2024-24577)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211258	Fedora 41 : rust-asyncgit / rust-bat / rust-cargo-c / rust-eza / etc (2024-401f10a92f)	Nessus	Fedora Local Security Checks	critical
203006	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libgit2 (SUSE-SU-2024:2584-1)	Nessus	SuSE Local Security Checks	critical
194562	Fedora 40 : rust-asyncgit / rust-bat / rust-cargo-c / rust-eza / etc (2024-53685bdcb6)	Nessus	Fedora Local Security Checks	critical
192447	Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2024-566)	Nessus	Amazon Linux Local Security Checks	critical
192201	Amazon Linux 2 : rust (ALAS-2024-2496)	Nessus	Amazon Linux Local Security Checks	critical
191595	Amazon Linux 2023 : libgit2, libgit2-devel (ALAS2023-2024-541)	Nessus	Amazon Linux Local Security Checks	critical
191559	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : libgit2 vulnerabilities (USN-6678-1)	Nessus	Ubuntu Local Security Checks	critical
190870	Fedora 38 : rust-asyncgit / rust-bat / rust-cargo-c / rust-eza / etc (2024-993d3a78dd)	Nessus	Fedora Local Security Checks	critical
190720	Fedora 39 : rust-asyncgit / rust-bat / rust-cargo-c / rust-eza / etc (2024-8ba389815f)	Nessus	Fedora Local Security Checks	critical
190642	Fedora 39 : libgit2_1.6 (2024-605004a28e)	Nessus	Fedora Local Security Checks	critical
190641	Fedora 38 : libgit2 (2024-a7a3c8ccdd)	Nessus	Fedora Local Security Checks	critical
190638	Fedora 39 : libgit2 (2024-92bac3b909)	Nessus	Fedora Local Security Checks	critical
190381	Debian dsa-5619 : libgit2-1.1 - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2024-24575

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical