CVE-2008-3546

N/A Unknown
Published: August 07, 2008 Modified: April 23, 2026
View on NVD

Description

Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX when running GIT utilities such as git-diff or git-grep.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://kerneltrap.org/mailarchive/git/2008/7/16/2529284
Source: cve@mitre.org
Exploit
http://secunia.com/advisories/31347
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/31780
Source: cve@mitre.org
http://secunia.com/advisories/32029
Source: cve@mitre.org
http://secunia.com/advisories/32384
Source: cve@mitre.org
http://secunia.com/advisories/33964
Source: cve@mitre.org
http://security.gentoo.org/glsa/glsa-200809-16.xml
Source: cve@mitre.org
http://wiki.rpath.com/Advisories:rPSA-2008-0253
Source: cve@mitre.org
http://www.debian.org/security/2008/dsa-1637
Source: cve@mitre.org
http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.5.6.4.txt
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/495391/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/30549
Source: cve@mitre.org
http://www.securitytracker.com/id?1020627
Source: cve@mitre.org
http://www.ubuntu.com/usn/USN-723-1
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2008/2306
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/44217
Source: cve@mitre.org
https://issues.rpath.com/browse/RPL-2707
Source: cve@mitre.org
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00729.html
Source: cve@mitre.org
http://kerneltrap.org/mailarchive/git/2008/7/16/2529284
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://secunia.com/advisories/31347
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/31780
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/32029
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/32384
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/33964
Source: af854a3a-2127-422b-91ae-364da2661108
http://security.gentoo.org/glsa/glsa-200809-16.xml
Source: af854a3a-2127-422b-91ae-364da2661108
http://wiki.rpath.com/Advisories:rPSA-2008-0253
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2008/dsa-1637
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.5.6.4.txt
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/495391/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/30549
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1020627
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-723-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2008/2306
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/44217
Source: af854a3a-2127-422b-91ae-364da2661108
https://issues.rpath.com/browse/RPL-2707
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00729.html
Source: af854a3a-2127-422b-91ae-364da2661108

36 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-119

Affected Vendors

git linux

Related CVEs

CVE-2026-41279 N/A
CVE-2026-41278 N/A
CVE-2026-41277 N/A
CVE-2026-41276 N/A
CVE-2026-41275 N/A