Executive brief
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
Affected products
- PyPI dulwich
Junglewise Threat Intelligence
CVE-2015-0838: PYSEC-2015-35 - Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute ar
CVE-2015-0838 · Severity: low · CVSS 3.1 · Published 2015-03-31
Technologies: dulwich (PyPI). Vendors: PyPI.
Related threats
- Jelmer Dulwich arbitrary code execution via submodule path traversal
- Dulwich uncontrolled memory allocation in git-receive-pack
- Dulwich path traversal in porcelain.format_patch via commit subject
- Dulwich OS command injection in ProcessMergeDriver
- Dulwich arbitrary file write and RCE via NTFS-hostile tree entries