cve/2024/CVE-2024-25817.md

CVE-2024-25817

Description

Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/objects components.

POC

Reference

• https://github.com/advisories/GHSA-3qx3-6hxr-j2ch
• https://www.cubeyond.net/blog/my-cves/eza-cve-report

Github

• https://github.com/CuB3y0nd/CuB3y0nd
• https://github.com/fkie-cad/nvd-json-data-feeds