CVE-2016-2315

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.

Date published : 2016-04-08

http://www.securityfocus.com/bid/84355

http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html