A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.
Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.
This is a go-git implementation issue and does not affect the upstream git cli.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2024-01-12 11:15
Updated : 2024-01-12 13:47
NVD link : CVE-2023-49568
Mitre link : CVE-2023-49568
JSON object : View
Products Affected
No product.
CWE
CWE-20
Improper Input Validation