Bug 617422 - git-core: upstream fix for buffer overrun (CVE-2010-2542)
Summary: git-core: upstream fix for buffer overrun (CVE-2010-2542)
Alias: None
Product: Fedora
Classification: Fedora
Component: git-core
Version: 13
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Adam Tkac
QA Contact: Fedora Extras Quality Assurance
Depends On:
Blocks: CVE-2010-2542
TreeView+ depends on / blocked
Reported: 2010-07-23 01:48 UTC by Greg Brockman
Modified: 2013-04-30 23:46 UTC (History)
4 users (show)

Fixed In Version: git-1.7.2-1.fc13
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2010-07-27 12:28:23 UTC
Type: ---

Attachments (Terms of Use)

Description Greg Brockman 2010-07-23 01:48:47 UTC
User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv: Gecko/20100423 Ubuntu/10.04 (lucid) Firefox/3.6.3

A fix for an exploitable buffer overrun (CVE-2010-2542, per [1]) was committed to git in [2]. In particular, if an attacker were to create a crafted working copy where the user runs any git command, the attacker could force execution of arbitrary code.

This attack should be mitigated to a denial of service if git is compiled with appropriate stack-protecting flags, as is the case on Fedora.

This buffer overrun was introduced in [3], which first appeared in v1.5.6, and is fixed in v1.7.2.

[1] http://seclists.org/oss-sec/2010/q3/93
[2] http://git.kernel.org/?p=git/git.git;a=commit;h=3c9d0414ed2db0167e6c828b547be8fc9f88fccc
[3] http://git.kernel.org/?p=git/git.git;a=commit;h=b44ebb19e3234c5dffe9869ceac5408bb44c2e20

Reproducible: Always

Comment 1 Jan Lieskovsky 2010-07-26 07:08:36 UTC
This issue has been addressed in the current versions of the git
package, present in Fedora -testing repository (git-1.7.2-1.fc1{2,3,4}).

Comment 2 Adam Tkac 2010-07-27 12:28:23 UTC
Fixed in git-1.7.2-1.fc13.

Note You need to log in before you can comment on or make changes to this bug.