CVE-2026-53587

highpriority · track · 10EPSS 0.005 · 40 %ileexploit · PoCDERU

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

0.47% (40th) EPSS

CVSS 7.5 · high

Is it mine?

14 products

Check your exposure

Who says so?

2 sources

fstec_bdu · cert_bund

EPSS · scored 2026-10-27

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · security-advisories@github.comexploitability 3.9 · impact 3.6

v3.17.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Psecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-125USCWE-125USCWE-126USCWE-126USCWE-1284USCWE-1284USCWE-20USCWE-20US

exploits (1)

Public proof-of-concept and weaponised exploit code.

Alixploit22/CVE-2026-53587Alixploit22/CVE-2026-53587PoC · poc_in_github

affected products (14)

Products and version ranges known to be affected.

Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux 10all versionscert_bundDEcpe:/o:redhat:enterprise_linux:10
Amazon.com Inc. Amazon Linux≤ 2023fstec_bduRU
Amazon.com Inc. Amazon Linux 2≤ Corefstec_bduRU
Canonical Ltd. Ubuntu≤ 26.04 LTSfstec_bduRU
Canonical Ltd. Ubuntu≤ 24.04 LTSfstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 10fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 9fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux AI≤ 3fstec_bduRU
Red Hat Inc. Red Hat Hardened Imagesall versionsfstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 13fstec_bduRU
Сообщество свободного программного обеспечения Libgit2≤ 1.8.6fstec_bduRU
Сообщество свободного программного обеспечения Libgit2≤ 1.9.5fstec_bduRU

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-3333Red Hat Enterprise Linux (libgit2): Schwachstelle ermöglicht Denial of ServiceDeutsch2026-09-13csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.

also known as (1)

Other names and identifiers for this entity.

BDU:2026-12652 fstec_bdu

sources

Which sources assert this record, and when.

fstec_bdu cert_bund NVD CVE.org MITRE

published 2026-08-20modified 2026-10-26

references (6) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan