Lucene search

K
cloudlinuxCloudLinuxCLSA-2024:1725655852
HistorySep 06, 2024 - 8:50 p.m.

git: Fix of CVE-2024-32004

2024-09-0620:50:55
repo.cloudlinux.com
3
git
cve-2024-32004
ownership checking
cloning
local repositories
unix

CVSS3

8.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

  • CVE-2024-32004: integrating ownership checking to detect dubious local
    repositories during cloning

CVSS3

8.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

7.3

Confidence

Low