GitHub Advisoryadvisory · crates.io
GHSA-3qx3-6hxr-j2ch eza Potential Heap Overflow Vulnerability for AArch64
HIGH
Official page ↗
- Aliases
- CVE-2024-25817
- Ecosystem
- crates.io
- Packages
- eza
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Reviewed
- 2024-02-08
Affected packages
• crates.io eza: < 0.18.2 → fixed in 0.18.2
Description
Summary
In `eza`, there exists a potential heap overflow vulnerability, first seen when using Ubuntu for Raspberry Pi series system, on `ubuntu-raspi` kernel, relating to the `.git` directory.
Details
The vulnerability seems to be triggered by the `.git` directory in some projects. This issue may be related to specific files, and the directory structure also plays a role in triggering the vulnerability. Files/folders that may be involved in triggering the vulnerability include `.git/HEAD`, `.git/refs`, and `.git/objects`.
As @polly pointed out to me, this is likely caused by GHSA-j2v7-4f6v-gpg8, which we do seem to use currently.
PoC
For more information check @CuB3y0nd's blogpost blog.
Impact
Arbitrary code execution.
Related
Alias · CVE (1)
- CVE-2024-25817 Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs,… vulnerability