git: git-daemon Denial of service

git: git-daemon Denial of service An error in git-daemon might lead to a Denial of Service via resource consumption. git 2009-07-12 2009-07-12 273905 remote 1.6.3.3 1.6.3.3

git - the stupid content tracker, the revision control system used by the Linux kernel team.

Shawn O. Pearce reported that git-daemon runs into an infinite loop when handling requests that contain unrecognized arguments.

A remote unauthenticated attacker could send a specially crafted request to git-daemon, possibly leading to a Denial of Service (CPU consumption).

There is no known workaround at this time.

All git users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=dev-util/git-1.6.3.3"

CVE-2009-2108 craig rbu rbu