Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows an malicious user to cause a denial of service via a crafted repository index file.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
libgit2 libgit2 |
||
debian debian linux 9.0 |