CVE-2016-2315: Git-Scm Git

Critical severity, CVSS 9.8. EPSS: 17.3% chance of exploitation in the next 30 days.

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.

Affected products

• Git-Scm Git: version 2.7.3 only
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.2 only
• Suse Linux Enterprise Debuginfo: version 11 only
• Suse Linux Enterprise Server: version 12 only
• Suse Linux Enterprise Software Development Kit: version 11 only; version 12 only
• Suse Openstack Cloud: version 5 only
• Suse Suse Linux Enterprise Server: version 12 only

Published 2016-04-08. Last modified 2026-06-17.