CVE-2018-10887: Out-of-bounds Read

July 10, 2018 (updated October 9, 2019)

The libgit2 library, which is used by pygit2, is vulnerable to an integer overflow which leads to an out-of-bound read. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.

References

bugzilla.redhat.com/show_bug.cgi?id=1598021
nvd.nist.gov/vuln/detail/CVE-2018-10887

Code Behaviors & Features

Detect and mitigate CVE-2018-10887 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →