CVE

Id
87634  
CVE No.
CVE-2016-10130  
Status
Candidate  
Description
The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable.  
Phase
Assigned (20170110)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764441 87634 CVE-2016-10130 MLIST:[oss-security] 20170110 CVE Request: two security fixes in libgit2 0.25.1, 0.24.6  View
764442 87634 CVE-2016-10130 URL:http://www.openwall.com/lists/oss-security/2017/01/10/5  View
764443 87634 CVE-2016-10130 MLIST:[oss-security] 20170110 Re: CVE Request: two security fixes in libgit2 0.25.1, 0.24.6  View
764444 87634 CVE-2016-10130 URL:http://www.openwall.com/lists/oss-security/2017/01/11/6  View
764445 87634 CVE-2016-10130 CONFIRM:https://github.com/libgit2/libgit2/commit/9a64e62f0f20c9cf9b2e1609f037060eb2d8eb22  View
764446 87634 CVE-2016-10130 CONFIRM:https://github.com/libgit2/libgit2/commit/b5c6a1b407b7f8b952bded2789593b68b1876211  View
764447 87634 CVE-2016-10130 CONFIRM:https://libgit2.github.com/security/  View
764448 87634 CVE-2016-10130 SUSE:openSUSE-SU-2017:0397  View
764449 87634 CVE-2016-10130 URL:http://lists.opensuse.org/opensuse-updates/2017-02/msg00030.html  View
764450 87634 CVE-2016-10130 SUSE:openSUSE-SU-2017:0405  View
764451 87634 CVE-2016-10130 URL:http://lists.opensuse.org/opensuse-updates/2017-02/msg00036.html  View
764452 87634 CVE-2016-10130 SUSE:openSUSE-SU-2017:0484  View
764453 87634 CVE-2016-10130 URL:http://lists.opensuse.org/opensuse-updates/2017-02/msg00072.html  View
764454 87634 CVE-2016-10130 BID:95359  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1898 JVNDB-2016-002671 Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-1128 87634 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002671.html  View