CVE-2016-2315

Critical

Published: 08/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In git versions before 2.7.4, there is a bug in revision.c that uses an incorrect integer data type. This allows remote attackers to execute arbitrary code via (1) long filenames or (2) many nested trees, leading to a heap-based buffer overflow.

Risk Assessment

This vulnerability may lead to remote code execution, posing a serious security threat to systems using the vulnerable version of git.

Recommendation

It is recommended to update git to version 2.7.4 or later to mitigate this vulnerability.

Original NVD description (English source)

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.