CVE Feed

    Dashboard / CVE / CVE-2016-2315

    CVE-2016-2315

    revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.

    Published:Mar 6, 2016
    Last Modified:Apr 12, 2025
    EPS:Apr 8, 2016
    EPSS Score:0.2572
    CVSS Score:9.8

    Affected Products

    Vendor
    Git-scm
    Product
    Git
    Vendor
    Opensuse
    Product
    Leap
    Vendor
    Opensuse
    Product
    Opensuse
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Software Collections
    Vendor
    Suse
    Product
    Linux Enterprise Debuginfo
    Vendor
    Suse
    Product
    Linux Enterprise Server
    Vendor
    Suse
    Product
    Linux Enterprise Software Development Kit
    Vendor
    Suse
    Product
    Openstack Cloud
    Vendor
    Suse
    Product
    Suse Linux Enterprise Server

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-48384 (CVSS 8) — Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides …
    CVE-2024-32004 (CVSS 8.1) — Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4…
    CVE-2024-32021 (CVSS 3.9) — Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4…
    CVE-2024-32020 (CVSS 3.9) — Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4…
    CVE-2024-32465 (CVSS 7.3) — Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and i…
    CVE-2023-25652 (CVSS 7.5) — Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.…
    CVE-2023-29007 (CVSS 7) — Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.…
    CVE-2023-23946 (CVSS 6.2) — Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36…
    CVE-2023-22490 (CVSS 5.5) — Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, …
    CVE-2022-41953 (CVSS 8.6) — Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are u…

    References

    http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183147.html
    http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179121.html
    http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180763.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html
    http://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html
    http://pastebin.com/UX2P2jjg
    http://rhn.redhat.com/errata/RHSA-2016-0496.html
    http://www.debian.org/security/2016/dsa-3521
    http://www.openwall.com/lists/oss-security/2016/03/15/5
    http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
    http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
    http://www.securityfocus.com/bid/84355
    http://www.securitytracker.com/id/1035290
    http://www.ubuntu.com/usn/USN-2938-1
    https://github.com/git/git/commit/34fa79a6cde56d6d428ab0d3160cb094ebad3305
    https://github.com/git/git/commit/de1e67d0703894cb6ea782e36abb63976ab07e60
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt
    https://security.gentoo.org/glsa/201605-01
    http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183147.html
    http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179121.html
    http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180763.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html
    http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html
    http://lists.opensuse.org/opensuse-updates/2016-04/msg00011.html
    http://pastebin.com/UX2P2jjg
    http://rhn.redhat.com/errata/RHSA-2016-0496.html
    http://www.debian.org/security/2016/dsa-3521
    http://www.openwall.com/lists/oss-security/2016/03/15/5
    http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
    http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
    http://www.securityfocus.com/bid/84355
    http://www.securitytracker.com/id/1035290
    http://www.ubuntu.com/usn/USN-2938-1
    https://github.com/git/git/commit/34fa79a6cde56d6d428ab0d3160cb094ebad3305
    https://github.com/git/git/commit/de1e67d0703894cb6ea782e36abb63976ab07e60
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt
    https://security.gentoo.org/glsa/201605-01

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High