CVE-2016-2324
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Git是美国软件开发者林纳斯-托瓦兹（Linus Torvalds）所研发的一套免费、开源的分布式版本控制系统。 Git 2.7.4之前版本的revision.c文件中存在整数溢出漏洞。远程攻击者可借助较长的文件名或多个嵌套树利用该漏洞执行任意代码。
Possible ATT&CK Techniques 3 AI
T1597 · Search Closed Sources T1590 · Gather Victim Network Information T1204.003 · Malicious Image
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2016-2324
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Git‘path_name()’整数溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Git是美国软件开发者林纳斯-托瓦兹（Linus Torvalds）所研发的一套免费、开源的分布式版本控制系统。 Git 2.7.4之前版本的revision.c文件中存在整数溢出漏洞。远程攻击者可借助较长的文件名或多个嵌套树利用该漏洞执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2016-2324
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-2324
请登录查看更多情报信息。
Vendor Advisories for CVE-2016-2324 (5)
Mailing List Discussions for CVE-2016-2324 (13)
-
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00060.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00059.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00062.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00071.html vendor-advisory x_refsource_SUSE
-
-
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00077.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00074.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00076.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00061.html vendor-advisory x_refsource_SUSE
-
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179121.html vendor-advisory x_refsource_FEDORA
-
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183147.html vendor-advisory x_refsource_FEDORA
-
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180763.html vendor-advisory x_refsource_FEDORA
-
Other References for CVE-2016-2324 (4)
-
http://pastebin.com/UX2P2jjg x_refsource_MISC
-
http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html x_refsource_CONFIRM
Same Patch Batch · n/a · 2016-04-08 · 31 CVEs total
| CVE-2016-2512 | Django‘django.utils.http.is_safe_url()’安全绕过漏洞 | |
| CVE-2015-8840 | SAP NetWeaver AS Java XML Data Archiving Service服务安全漏洞 | |
| CVE-2016-3980 | SAP NetWeaver AS JAVA Java Startup Framework组件拒绝服务漏洞 | |
| CVE-2016-3979 | SAP NetWeaver AS JAVA Internet Communication Manager组件拒绝服务漏洞 | |
| CVE-2016-3978 | Fortinet FortiOS Web User Interface 安全漏洞 | |
| CVE-2016-3188 | Drupal Prepopulate模块安全漏洞 | |
| CVE-2016-3187 | Drupal Prepopulate模块安全漏洞 | |
| CVE-2016-3154 | SPIP 代码注入漏洞 | |
| CVE-2016-3153 | SPIP 代码注入漏洞 | |
| CVE-2016-2315 | Git‘path_name()’安全漏洞 | |
| CVE-2015-6541 | Zimbra Collaboration Server Mail接口跨站请求伪造漏洞 | |
| CVE-2016-3984 | 多款McAfee产品安全漏洞 | |
| CVE-2016-3983 | McAfee Advanced Threat Defense 安全漏洞 | |
| CVE-2016-3963 | Siemens SCALANCE S613 拒绝服务漏洞 | |
| CVE-2016-2513 | Django 安全漏洞 | |
| CVE-2015-5158 | QEMU 基于栈的缓冲区溢出漏洞 | |
| CVE-2016-2381 | Perl 输入验证错误漏洞 | |
| CVE-2016-1375 | Cisco IP Interoperability and Collaboration System 跨站脚本漏洞 | |
| CVE-2016-1180 | LOCKON EC-CUBE Social-button Premium插件跨站脚本漏洞 | |
| CVE-2015-5969 | Novell openSUSE mysql-community-server和mariadb 安全漏洞 |
Showing top 20 of 31 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-108770
Appwrite Browser Screenshot Service Get.php PublicHostname s -
CVE-2026-108572
Casdoor Proxy Validation cas.go CasP3ProxyValidate server-si -
CVE-2026-108539
GPAC MP4Box filter_queue.c gf_fq_pop use after free -
CVE-2026-108538
GPAC MP4Box os_thread.c gf_mx_v use after free -
CVE-2026-79363
Cloudron 9.1.7/9.2 品牌页脚存储型XSS漏洞
V. Comments for CVE-2016-2324
No comments yet