Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2017-16228

Disclosure Date: October 29, 2017 (last updated November 26, 2024)
Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117.
0
0
Attacker Value
Unknown

CVE-2014-9706

Disclosure Date: March 31, 2015 (last updated October 05, 2023)
The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree.
0
0
Attacker Value
Unknown

CVE-2015-0838

Disclosure Date: March 31, 2015 (last updated October 05, 2023)
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
0
0