CVE-2022-23521

🗓️ 17 Jan 2023 22:17:17Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 32 Views

Integer overflows in Git gitattributes parsing can lead to remote code execution

Reporter	Title	Published	Views	Family All 206
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in Git [CVE-2022-23521]	6 Apr 202319:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.4.5 addresses multiple security vulnerabilities	17 Apr 202313:48	–	ibm
FreeBSD	git -- gitattributes parsing integer overflow	17 Jan 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : git, git-all, git-core (ALAS2023-2023-065)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : git, git-all, git-core (ALAS-2023-1923)	6 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : emacs-git, emacs-git-el, git (ALAS-2023-1679)	6 Feb 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0020: git (ALINUX3-SA-2023:0020)	14 May 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	git	1:2.30.2-1+deb11u1	git_1:2.30.2-1+deb11u1_all.deb
Debian	12	all	git	1:2.39.1-0.1	git_1:2.39.1-0.1_all.deb
Debian	13	all	git	1:2.39.1-0.1	git_1:2.39.1-0.1_all.deb
Debian	14	all	git	1:2.39.1-0.1	git_1:2.39.1-0.1_all.deb
Debian	999	all	git	1:2.39.1-0.1	git_1:2.39.1-0.1_all.deb

17 Jan 2023 22:17Current

9High risk

Vulners AI Score9

CVSS 3.19.8

EPSS0.56334

SSVC

git integer overflows parsing remote code execution patch upgrade unix cve-2022-23521