CVE-2024-25817

Description

Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/objects components.

References

https://www.cubeyond.net/blog/my-cves/eza-cve-report

https://github.com/advisories/GHSA-3qx3-6hxr-j2ch

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3