Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0838
Reference (s):
- DEBIAN:DSA-3206
- URL: http://www.debian.org/security/2015/dsa-3206
- MLIST:[oss-security] 20150322 Dulwich security issue
- URL: https://lists.launchpad.net/dulwich-users/msg00829.html