CVE-2008-3546: Buffer Overflow

Published Aug 7, 2008

Updated

Stack-based buffer overflow in the (1) diffaddremove and (2) diffchange functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATHMAX when running GIT utilities such as git-diff or git-grep.

Affected Software

8 affected components

Linux Parduslinux=2007

Linux Parduslinux=2008

Git Git=1.5.5.3

Git Git=1.5.5.3-r1

Git Git=1.5.5.4

Git Git=1.5.6.1

Git Git=1.5.6.2

Git Git=1.5.6.3

Event History

Aug 7, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

09:41 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-3546?

CVE-2008-3546 is a high-severity vulnerability due to a stack-based buffer overflow that can allow arbitrary code execution.

How do I fix CVE-2008-3546?

To fix CVE-2008-3546, upgrade GIT to version 1.5.6.4 or later.

Which versions of GIT are affected by CVE-2008-3546?

CVE-2008-3546 affects GIT versions prior to 1.5.6.4, including versions 1.5.5.3, 1.5.5.4, 1.5.6.1, 1.5.6.2, and 1.5.6.3.

Can CVE-2008-3546 be exploited remotely?

CVE-2008-3546 is a local vulnerability, requiring access to the system for exploitation.

What systems are primarily impacted by CVE-2008-3546?

CVE-2008-3546 primarily impacts systems running affected versions of GIT, like Linux distributions using outdated versions.