Lucene search
CloudLinuxCLSA-2023:1677231280HistoryFeb 24, 2023 - 9:34 a.m.
git: Fix of 4 CVEs
2023-02-2409:34:40
repo.cloudlinux.com
27
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.2%
- CVE-2022-41903: fix out-of-bounds write caused by integer overflow
- CVE-2021-40330: forbid newlines in host and path
- CVE-2022-39260: reject too long command line strings
- CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links
Related
openvas
openvas
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2023-2424)
2023-07-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0418-1)
2023-02-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3484-1)
2021-10-21 00:00:00
nessus
nessus
EulerOS Virtualization 3.0.6.6 : git (EulerOS-SA-2023-2424)
2023-07-26 00:00:00
SUSE SLES15 Security Update : git (SUSE-SU-2023:0418-1)
2023-02-16 00:00:00
EulerOS 2.0 SP10 : git (EulerOS-SA-2022-1204)
2022-02-25 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0299
2021-09-14 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0433
2021-09-14 00:00:00
Important Photon OS Security Update - PHSA-2021-0099
2021-09-14 00:00:00
veracode
veracode
Cross-Site Request Forgery (CSRF)
2021-09-03 13:11:49
Integer Overflow
2023-01-18 20:22:07
Path Traversal
2023-02-15 05:26:54
ubuntucve
ubuntucve
debiancve
debiancve
prion
prion
Design/Logic Flaw
2021-08-31 04:15:00
Path traversal
2023-02-14 20:15:00
Heap overflow
2022-10-19 12:15:00
osv
osv
git vulnerability
2021-09-13 14:49:00
CVE-2021-40330
2021-08-31 04:15:10
CVE-2022-39260
2022-10-19 12:15:10
cbl_mariner
cbl_mariner
CVE-2021-40330 affecting package git 2.23.4-2
2021-10-05 03:00:54
CVE-2023-23946 affecting package git 2.33.6-1
2023-03-16 03:39:40
CVE-2022-41903 affecting package git 2.33.4-1
2023-09-27 18:02:50
redhatcve
redhatcve
suse
suse
Security update for git (low)
2021-10-06 00:00:00
Security update for git (low)
2021-10-11 00:00:00
cloudfoundry
cloudfoundry
USN-5076-1: Git vulnerability | Cloud Foundry
2021-10-28 00:00:00
USN-5871-1: Git vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
cve
cve
ibm
ibm
ubuntu
ubuntu
Git vulnerability
2021-09-13 00:00:00
Git vulnerability
2022-11-17 00:00:00
Git vulnerabilities
2022-10-18 00:00:00
alpinelinux
alpinelinux
githubexploit
githubexploit
Exploit for Path Traversal in Git-Scm Git
2023-09-07 10:07:25
cgr
cgr
CVE-2023-23946 vulnerabilities
2024-04-28 03:20:57
CVE-2022-39260 vulnerabilities
2024-04-28 03:20:57
CVE-2022-41903 vulnerabilities
2024-04-28 03:20:57
freebsd
freebsd
git -- Heap overflow in `git archive`, `git log --format` leading to RCE
2023-01-17 00:00:00
git -- "git apply" overwriting paths outside the working tree
2023-02-14 00:00:00
git -- Multiple vulnerabilities
2022-06-09 00:00:00
mscve
mscve
GitHub: CVE-2023-23946 mingit Remote Code Execution Vulnerability
2023-03-14 07:00:00
wolfi
wolfi
CVE-2022-39260 vulnerabilities
2024-04-27 21:06:10
CVE-2022-41903 vulnerabilities
2024-04-27 21:06:10
CVE-2023-23946 vulnerabilities
2024-04-27 21:06:10
rosalinux
rosalinux
Advisory ROSA-SA-2024-2398
2024-04-11 08:08:00
Advisory ROSA-SA-2023-2292
2023-11-14 13:25:27
redhat
redhat
(RHSA-2024:0407) Moderate: git security update
2024-01-24 14:40:19
(RHSA-2023:0627) Important: git security update
2023-02-07 15:25:58
(RHSA-2023:0978) Important: git security update
2023-02-28 09:05:49
debian
debian
[SECURITY] [DSA 5332-1] git security update
2023-01-29 16:59:53
[SECURITY] [DLA 3145-1] git security update
2022-10-10 22:16:21
[SECURITY] [DSA 5357-1] git security update
2023-02-23 06:31:03
gentoo
gentoo
Git: Multiple Vulnerabilities
2023-12-27 00:00:00
redos
redos
ROS-20230322-03
2023-03-22 00:00:00
kaspersky
kaspersky
KLA20184 Multiple vulnerabilities in Git for Windows
2022-10-18 00:00:00
KLA20236 Multiple vulnerabilities in Git for Windows
2023-02-14 00:00:00
amazon
amazon
fedora
fedora
[SECURITY] Fedora 35 Update: git-2.38.1-1.fc35
2022-11-02 15:46:46
[SECURITY] Fedora 37 Update: git-2.38.1-1.fc37
2022-11-10 22:48:58
[SECURITY] Fedora 36 Update: git-2.39.2-1.fc36
2023-02-22 11:10:29
oraclelinux
oraclelinux
git security update
2023-02-28 00:00:00
rocky
rocky
git security update
2023-02-06 19:26:44
git security update
2023-02-06 19:25:41
centos
centos
emacs, git, gitk, gitweb, perl security update
2023-03-01 14:01:43
thn
thn
Git Users Urged to Update Software to Prevent Remote Code Execution Attacks
2023-01-18 09:28:00
slackware
slackware
[slackware-security] git
2023-01-18 06:22:27
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.2%
Related for CLSA-2023:1677231280