CVE-2015-0838 – Buffer overflow in the C implementation of the apply_delta function in _p

4 years ago

Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0838

Reference (s):

DEBIAN:DSA-3206
URL: http://www.debian.org/security/2015/dsa-3206
MLIST:[oss-security] 20150322 Dulwich security issue
URL: https://lists.launchpad.net/dulwich-users/msg00829.html