It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate could possibly use this issue to perform a machine-in-the-middle attack, leading to the exposure of sensitive information. Weiterlesen: USN-8907-1: libgit2 vulnerability
Intelligence View
⚡ tsecurity.de Intelligence
USN-8907-1: libgit2 vulnerability
It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
19 sources
CVE-2018-7489 | Oracle Retail Invoice Matching 15.0/16.0 jackson-databind incomplete blacklist (Nessus ID 109906 / ID 236791)
18 more sources
VVulDB Updates1 hour agoCVE-2018-7489 | Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0/14.1.1.0.0 Centralized Third Party Jars incomplete blacklist (Nessus ID 233045 / ID 236873) VVulDB Updates1 hour agoCVE-2018-7489 | Oracle Global Lifecycle Management OPatchAuto up to 12.2.0.1.13 jackson-databind incomplete blacklist (Nessus ID 109906 / ID 236873) VVulDB Updates1 hour agoCVE-2018-7489 | Oracle Retail Xstore Point of Service up to 17.0.2 Xenvironment incomplete blacklist (Nessus ID 109906 / ID 236791) VVulDB Updates1 hour agoCVE-2018-7489 | Oracle Retail Sales Audit 15.0/16.0 Operational Insights deserialization (Nessus ID 109906 / ID 236791) VVulDB Updates1 hour agoCVE-2018-7489 | Oracle Retail Assortment Planning 15.0 Application Core incomplete blacklist (Nessus ID 109906 / ID 236791) VVulDB Updates1 hour agoCVE-2018-7489 | Oracle Retail Allocation 15.0/16.0 jackson-databind incomplete blacklist (Nessus ID 109906 / ID 236791)
+12
12 sources
CVE-2026-19600 | Mattermost up to 11.7.10/11.8.5/11.9.1/11.10.1 Server Log information disclosure (WID-SEC-2026-4009)
11 more sources
VVulDB Updates1 hour agoCVE-2026-19541 | Mattermost up to 11.7.10/11.8.5/11.9.1/11.10.1 OAuth Validation permission (WID-SEC-2026-4009) VVulDB Updates1 hour agoCVE-2026-19603 | Mattermost up to 11.7.10/11.8.5/11.9.1/11.10.1 User Status API privileges management (WID-SEC-2026-4009) VVulDB Updates1 hour agoCVE-2026-19601 | Mattermost up to 11.7.10/11.8.5/11.9.1/11.10.1 AD LDAP missing encryption (WID-SEC-2026-4009) VVulDB Updates1 hour agoCVE-2026-19867 | Mattermost up to 11.7.10/11.8.5/11.9.1/11.10.0 Notification Properties mention_keys resource consumption (WID-SEC-2026-4009) VVulDB Updates1 hour agoCVE-2026-78163 | Apache Camel Camel-Docling server-side request forgery (WID-SEC-2026-4006) VVulDB Updates41 min. agoCVE-2026-80344 | Apache Camel AS2 server-side request forgery (WID-SEC-2026-4006)
+5
11 sources
CVE-2022-46691 | Apple macOS up to 13.0 WebKit memory allocation (HT213532 / EUVD-2022-49480)
10 more sources
VVulDB Updates2 hours agoCVE-2022-46691 | Apple Safari up to 16.1 WebKit memory allocation (HT213537 / EUVD-2022-49480) VVulDB Updates2 hours agoCVE-2022-46696 | Apple iOS/iPadOS up to 16.1.2 WebKit memory corruption (HT213530 / EUVD-2022-49485) VVulDB Updates2 hours agoCVE-2022-46696 | Apple watchOS up to 9.1 WebKit memory corruption (HT213536 / EUVD-2022-49485) VVulDB Updates2 hours agoCVE-2022-46696 | Apple tvOS up to 16.1.1 WebKit memory corruption (HT213535 / EUVD-2022-49485) VVulDB Updates50 min. agoCVE-2022-46696 | Apple macOS up to 13.0 WebKit memory corruption (HT213532 / EUVD-2022-49485) VVulDB Updates50 min. agoCVE-2022-46696 | Apple Safari up to 16.1 WebKit memory corruption (HT213537 / EUVD-2022-49485)
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4276844/vulnerabilities-cve/usn-8907-1-libgit2-vulnerability/