Double Free Vulnerability in Libgit2 Affects Repository Management
CVE-2018-8099

6.5MEDIUM

Key Information:

Vendor: Libgit2
Status: Libgit2
Vendor: CVE Published:; 14 March 2018

What is CVE-2018-8099?

This vulnerability arises due to improper error code handling in the index.c:read_entry() function of Libgit2, which can lead to a double free condition. An attacker can exploit this flaw by supplying a maliciously crafted repository index file, resulting in a denial of service. Users of Libgit2 versions prior to 0.26.2 are urged to update to prevent potential exploitation aimed at service disruption.