N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-j39j-6gw9-jw6h

GHSA-j39j-6gw9-jw6h: git2 has potential undefined behavior when dereferencing Buf struct

If the Buf struct is dereferenced immediately after calling new() or default() on the Buf struct, a null pointer is passed to the unsafe function slice::from_raw_parts. According to the safety section documentation of the function, data must be non-null and aligned even for zero-length slices or slices of ZSTs. Thus, passing a null pointer will lead to undefined behavior.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-j39j-6gw9-jw6h

GHSA-j39j-6gw9-jw6h:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
git2	rust	< 0.20.4	0.20.4

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the git2 crate's Buf struct, specifically in its implementation of the Deref and DerefMut traits. The deref and deref_mut methods were calling the unsafe functions slice::from_raw_parts and slice::from_raw_parts_mut respectively. The issue arises when a Buf struct is created via Buf::new() or Buf::default(), which results in its internal pointer being null. If this Buf is then dereferenced, a null pointer is passed to the unsafe slice functions, which is explicitly documented as undefined behavior. The patch addresses this by introducing a null check at the beginning of both deref and deref_mut. If the pointer is null, an empty slice is returned, preventing the unsafe call with a null pointer.

Vulnerable functions

Buf::deref

src/buf.rs

The `deref` function, which implements the `Deref` trait for the `Buf` struct, was vulnerable. It directly called the unsafe function `slice::from_raw_parts` with a pointer that could be null if the `Buf` was created using `new()` or `default()`. Passing a null pointer to `slice::from_raw_parts` results in undefined behavior.

Buf::deref_mut

src/buf.rs

The `deref_mut` function, which implements the `DerefMut` trait for the `Buf` struct, was vulnerable. It directly called the unsafe function `slice::from_raw_parts_mut` with a pointer that could be null if the `Buf` was created using `new()` or `default()`. Passing a null pointer to `slice::from_raw_parts_mut` results in undefined behavior.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.