CyberRota Analysis
AI-GeneratedGitoxide versions prior to 0.69.0 are vulnerable due to unchecked array indexing and uncapped allocation from attacker-controlled size headers in gix-pack, which can lead to application panics or out-of-memory errors during clone or fetch operations. This vulnerability poses a high risk as it can be exploited by attackers to disrupt service availability. Organizations using Gitoxide should prioritize updating to the latest version to mitigate potential disruptions and security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills.