Lucene search
CloudLinuxCLSA-2023:1683814164HistoryMay 11, 2023 - 2:15 p.m.
git: Fix of 2 CVEs
2023-05-1114:15:13
repo.cloudlinux.com
8
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.0%
- CVE-2023-25652: removing a link instead of writing into
- CVE-2023-29007: restrict the config file line length to parse it whole
- tests were activated
- a buffer overflow during reading of configuration’s enormous value has been fixed
Related
nessus
nessus
RHEL 7 : git (RHSA-2023:3263)
2023-05-23 00:00:00
Amazon Linux 2023 : git, git-all, git-core (ALAS2023-2023-180)
2023-05-24 00:00:00
redhat
redhat
(RHSA-2023:3263) Important: git security update
2023-05-23 09:00:35
(RHSA-2023:3192) Important: git security update
2023-05-17 15:13:23
(RHSA-2023:3248) Important: git security update
2023-05-22 06:39:03
oraclelinux
oraclelinux
git security update
2023-05-23 00:00:00
git security update
2023-05-24 00:00:00
git security update
2023-05-23 00:00:00
redos
redos
ROS-20230824-02
2023-08-24 00:00:00
centos
centos
emacs, git, gitk, gitweb, perl security update
2023-07-27 14:38:52
openvas
openvas
CentOS: Security Advisory for emacs-git (CESA-2023:3263)
2023-07-30 00:00:00
Ubuntu: Security Advisory (USN-6050-2)
2023-05-18 00:00:00
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2023-2683)
2023-09-05 00:00:00
osv
osv
git vulnerabilities
2023-05-17 13:56:26
git vulnerabilities
2023-05-01 09:37:06
Important: git security update
2023-05-22 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2176
2023-06-27 09:16:21
Advisory ROSA-SA-2023-2292
2023-11-14 13:25:27
Advisory ROSA-SA-2024-2398
2024-04-11 08:08:00
freebsd
freebsd
git -- Multiple vulnerabilities
2023-04-25 00:00:00
ubuntu
ubuntu
Git vulnerabilities
2023-05-17 00:00:00
Git vulnerabilities
2023-05-01 00:00:00
amazon
amazon
Medium: git
2023-06-05 16:39:00
slackware
slackware
[slackware-security] git
2023-04-25 21:30:49
mageia
mageia
Updated git packages fix security vulnerability
2023-05-06 21:19:07
fedora
fedora
[SECURITY] Fedora 36 Update: git-2.40.1-1.fc36
2023-05-12 02:08:45
[SECURITY] Fedora 38 Update: git-2.40.1-1.fc38
2023-04-28 02:38:56
[SECURITY] Fedora 37 Update: git-2.40.1-1.fc37
2023-05-01 01:29:35
cloudfoundry
cloudfoundry
USN-6050-1: Git vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package git version 2.33.8-alt1
2023-05-02 00:00:00
kaspersky
kaspersky
KLA49048 Multiple vulnerabilities in Git for Windows
2023-04-25 00:00:00
KLA50317 Multiple vulnerabilities in Microsoft Developer Tools
2023-06-13 00:00:00
prion
prion
Design/Logic Flaw
2023-04-25 21:15:00
Design/Logic Flaw
2023-04-25 20:15:00
debiancve
debiancve
CVE-2023-29007
2023-04-25 21:15:10
CVE-2023-25652
2023-04-25 20:15:09
cgr
cgr
CVE-2023-29007 vulnerabilities
2024-05-04 09:06:25
CVE-2023-25652 vulnerabilities
2024-05-04 09:06:25
wolfi
wolfi
CVE-2023-29007 vulnerabilities
2024-05-04 09:06:25
CVE-2023-25652 vulnerabilities
2024-05-04 09:06:25
almalinux
almalinux
Important: git security update
2023-05-22 00:00:00
Important: git security update
2023-05-22 00:00:00
redhatcve
redhatcve
CVE-2023-25652
2023-04-26 06:17:51
CVE-2023-29007
2023-04-26 06:22:31
mscve
mscve
rocky
rocky
git security update
2023-05-25 02:36:20
github
github
Git security vulnerabilities announced
2023-04-25 17:13:36
ubuntucve
ubuntucve
CVE-2023-29007
2023-04-25 00:00:00
CVE-2023-25652
2023-04-25 00:00:00
cnvd
cnvd
GIT suffers from a service parameter injection vulnerability
2023-05-31 00:00:00
githubexploit
githubexploit
Exploit for Injection in Git-Scm Git
2023-05-04 12:56:17
Exploit for Injection in Git-Scm Git
2023-05-02 23:47:51
Exploit for Injection in Git-Scm Git
2023-05-06 13:25:35
veracode
veracode
Remote Code Execution (RCE)
2023-05-12 17:58:59
Path Traversal
2023-05-13 14:50:11
cve
cve
CVE-2023-29007
2023-04-25 21:15:10
CVE-2023-25652
2023-04-25 20:15:09
alpinelinux
alpinelinux
CVE-2023-29007
2023-04-25 21:15:10
CVE-2023-25652
2023-04-25 20:15:09
gentoo
gentoo
Git: Multiple Vulnerabilities
2023-12-27 00:00:00
ibm
ibm
avleonov
avleonov
rapid7blog
rapid7blog
Patch Tuesday - June 2023
2023-06-13 20:49:27
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.0%
Related for CLSA-2023:1683814164