CVE-2016-2324: Git-Scm Git

Critical severity, CVSS 9.8. EPSS: 18.1% chance of exploitation in the next 30 days.

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

Affected products

• Git-Scm Git: up to and including 2.7.3
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.2 only
• Suse Linux Enterprise Debuginfo: version 11 only
• Suse Linux Enterprise Server: version 12.0 only
• Suse Linux Enterprise Software Development Kit: version 11 only; version 12 only; version 12.0 only
• Suse Openstack Cloud: version 5 only
• Suse Suse Linux Enterprise Server: version 12 only

Published 2016-04-08. Last modified 2026-06-17.