Total vulnerabilities in the database
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
| Software | From | Fixed in |
|---|---|---|
| suse / openstack_cloud | 5 | 5.x |
| suse / linux_enterprise_software_development_kit | 12-sp1 | 12-sp1.x |
| suse / linux_enterprise_software_development_kit | 12 | 12.x |
| suse / linux_enterprise_server | 12-sp1 | 12-sp1.x |
| suse / linux_enterprise_debuginfo | 11-sp4 | 11-sp4.x |
| opensuse / leap | 42.1 | 42.1.x |
| opensuse / opensuse | 13.2 | 13.2.x |
| suse / suse_linux_enterprise_server | 12 | 12.x |
| git-scm / git | 2.7.3 | 2.7.3.x |
| suse / linux_enterprise_software_development_kit | 11-sp4 | 11-sp4.x |