PyPI/dulwich CVE-2015-0838: unknown, EPSS 3.38%
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
Action: Upgrade dulwich to 0.9.9 or later.
pip install dulwich==0.9.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.9 | - |
Fixed versions
| 0.9.9 |
Sources
- osv: PYSEC-2015-35
- http://www.debian.org/security/2015/dsa-3206
- https://lists.launchpad.net/dulwich-users/msg00829.html
- https://github.com/advisories/GHSA-vjjf-3rvg-gv3v
CVE-2015-0838 · published · modified · JSON