FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

git -- denial of service vulnerability

Affected packages
git < 1.6.3.2_1

Details

VuXML ID d9b01c08-59b3-11de-828e-00e0815b8da8
Discovery 2009-06-04
Entry 2009-06-15
Modified 2010-05-02

SecurityFocus reports:

Git is prone to a denial-of-service vulnerability because it fails to properly handle some client requests.

Attackers can exploit this issue to cause a daemon process to enter an infinite loop. Repeated exploits may consume excessive system resources, resulting in a denial of service condition.

References

Bugtraq ID 35338
CVE Name CVE-2009-2108
URL http://article.gmane.org/gmane.comp.version-control.git/120724
URL https://www.redhat.com/archives/fedora-security-list/2009-June/msg00000.html