Oval Definition:oval:com.ubuntu.bionic:def:201810887000
Revision Date:2018-07-10Version:1
Title:CVE-2018-10887 on Ubuntu 18.04 LTS (bionic) - medium.
Description:A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read before the base object. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-10887
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND The 'libgit2' package in bionic was vulnerable but has been fixed (note: '0.26.0+dfsg.1-1.1ubuntu0.2').
  • BACK