Lucene search

JGit Improper Input Validation vulnerability

🗓️ 17 May 2022 19:29:57Reported by GitHub Advisory DatabaseType

JGit vulnerability due to improper input validation

Reporter	Title	Published	Views	Family All 64
Ubuntu	Git vulnerability	14 Jan 201500:00	–	ubuntu
OSV	mercurial - security update	11 May 201500:00	–	osv
OSV	PYSEC-2020-217	12 Feb 202002:15	–	osv
OSV	JGit Improper Input Validation vulnerability	17 May 202219:57	–	osv
OSV	mercurial - security update	4 Jun 201500:00	–	osv
OSV	OPENSUSE-SU-2024:10099-1 git-2.11.0-1.1 on GA media	15 Jun 202400:00	–	osv
Tenable Nessus	openSUSE Security Update : libgit2 (openSUSE-2015-288)	8 Apr 201500:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS : Git vulnerability (USN-2470-1)	14 Jan 201500:00	–	nessus
Tenable Nessus	GLSA-201509-06 : Git: Arbitrary command execution	25 Sep 201500:00	–	nessus
Tenable Nessus	GitHub < 1.9.4 .git/config Command Execution (Mac OS X)	23 Dec 201400:00	–	nessus

Vulners

Node

mercurial mercurialRange<3.2.3

org.eclipse.jgit org.eclipse.jgitRange<3.5.3

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-9390
github	www.github.com/libgit2/libgit2/commit/928429c5c96a701bcbcafacb2421a82602b36915
github	www.github.com/blog/1938-git-client-vulnerability-announced
news	www.news.ycombinator.com/item
article	www.article.gmane.org/gmane.linux.kernel/1853266
git-blame	www.git-blame.blogspot.com/2014/12/git-1856-195-205-214-and-221-and.html
mercurial	www.mercurial.selenic.com/wiki/WhatsNew
support	www.support.apple.com/kb/HT204147
projects	www.projects.eclipse.org/projects/technology.jgit/releases/3.5.3
web	www.web.archive.org/web/20211204220400/https://securitytracker.com/id

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 May 2022 19:57Current

9.1High risk

Vulners AI Score9.1

CVSS27.5

CVSS39.8

EPSS0.61692

CWE-20