CVE-2024-32884

2024-04-2618:15:46

CWE-77

CWE-88

GitHub_M

web.nvd.nist.gov

gitoxide

git transport

malicious code execution

clone url

ssh

vulnerability

patched

nvd

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

JSON

gitoxide is a pure Rust implementation of Git. gix-transport does not check the username part of a URL for text that the external ssh program would interpret as an option. A specially crafted clone URL can smuggle options to SSH. The possibilities are syntactically limited, but if a malicious clone URL is used by an application whose current working directory contains a malicious file, arbitrary code execution occurs. This is related to the patched vulnerability GHSA-rrjw-j4m2-mf34, but appears less severe due to a greater attack complexity. This issue has been patched in versions 0.35.0, 0.42.0 and 0.62.0.

Affected configurations

Vulners

Vulnrichment

Node

byrongitoxideRange<0.42.0

byrongitoxideRange<0.62

byrongitoxideRange<0.35

VendorProductVersionCPE
byrongitoxide*cpe:2.3:a:byron:gitoxide:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
byron	gitoxide	*	cpe:2.3:a:byron:gitoxide::::::::

CNA Affected

[
  {
    "vendor": "Byron",
    "product": "gitoxide",
    "versions": [
      {
        "version": "< 0.42.0",
        "status": "affected"
      },
      {
        "version": "< 0.62",
        "status": "affected"
      },
      {
        "version": "< 0.35",
        "status": "affected"
      }
    ]
  }
]