CyberRota Analysis
AI-GeneratedVersions of gitoxide gix-packetline prior to 0.21.5 are vulnerable to a panic condition caused by the TextRef implementation when handling side-band packet lines with empty payloads. This vulnerability allows a malicious Git server to send a specially crafted packet that can lead to an index out of bounds panic, resulting in the client process being aborted during fetch operations without requiring authentication. Organizations using affected versions should prioritize updating to mitigate potential disruptions during Git operations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
gitoxide gix-packetline versions before 0.21.5 contain a panic vulnerability in the TextRef implementation that occurs when processing side-band packet lines with empty payloads. A malicious Git server can send a crafted side-band packet to trigger an index out of bounds panic, aborting the client process during fetch operations without authentication.