CVE-2018-8098: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service (out-of-bounds read) via a crafted repository index file.

Affected products

• Debian Debian Linux: version 9.0 only
• LIBGIT2 LIBGIT2: before 0.26.2 (fixed in 0.26.2)

Published 2018-03-14. Last modified 2026-06-17.