libgit2 fails to verify SSH keys by default

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2023-22742 · Microsoft / collected KEV context

EUVD-2023-26860

GHSA-m4ch-rfv5-x5g3

GHSA-8643-3wh5-rmjq

RUSTSEC-2023-0003

cve-program · CVE-2023-22742

• https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq
• https://github.com/libgit2/libgit2/commit/42e5db98b963ae503229c63e44e06e439df50e56
• https://github.com/libgit2/libgit2/commit/cd6f679af401eda1f172402006ef8265f8bd58ea
• https://github.com/libgit2/libgit2/releases/tag/v1.4.5
• https://github.com/libgit2/libgit2/releases/tag/v1.5.1
• https://www.libssh2.org/
• http://www.openwall.com/lists/oss-security/2023/11/06/5

euvd · EUVD-2023-26860

• https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq
• https://github.com/libgit2/libgit2/commit/42e5db98b963ae503229c63e44e06e439df50e56
• https://github.com/libgit2/libgit2/commit/cd6f679af401eda1f172402006ef8265f8bd58ea
• https://github.com/libgit2/libgit2/releases/tag/v1.4.5
• https://github.com/libgit2/libgit2/releases/tag/v1.5.1
• https://www.libssh2.org/
• http://www.openwall.com/lists/oss-security/2023/11/06/5

nvd · CVE-2023-22742

• http://www.openwall.com/lists/oss-security/2023/11/06/5
• https://github.com/libgit2/libgit2/commit/42e5db98b963ae503229c63e44e06e439df50e56
• https://github.com/libgit2/libgit2/commit/cd6f679af401eda1f172402006ef8265f8bd58ea
• https://github.com/libgit2/libgit2/releases/tag/v1.4.5
• https://github.com/libgit2/libgit2/releases/tag/v1.5.1
• https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq
• https://www.libssh2.org/

osv · GHSA-m4ch-rfv5-x5g3

• https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq
• https://github.com/rust-lang/git2-rs/security/advisories/GHSA-m4ch-rfv5-x5g3
• https://nvd.nist.gov/vuln/detail/CVE-2023-22742
• https://github.com/rust-lang/git2-rs/commit/87934f87d36753ed702792ec063be7246444a8e1
• https://github.com/rust-lang/git2-rs
• https://rustsec.org/advisories/RUSTSEC-2023-0003.html

osv · RUSTSEC-2023-0003

• https://crates.io/crates/libgit2-sys
• https://rustsec.org/advisories/RUSTSEC-2023-0003.html
• https://github.com/rust-lang/git2-rs/commit/87934f87d36753ed702792ec063be7246444a8e1

No related operational record is retained in the current change model.