Integer overflow in `git archive` `git log --format` leading to RCE in git

🗓️ 23 Jan 2023 08:00:00Reported by MicrosoftType

Integer overflow in git archive and git log format can lead to remote code execution in git.

Reporter	Title	Published	Views	Family All 209
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in Git [CVE-2022-41903]	6 Apr 202319:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.4.5 addresses multiple security vulnerabilities	17 Apr 202313:48	–	ibm
FreeBSD	git -- Heap overflow in `git archive`, `git log --format` leading to RCE	17 Jan 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : git, git-all, git-core (ALAS2023-2023-065)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : git, git-all, git-core (ALAS-2023-1923)	6 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : emacs-git, emacs-git-el, git (ALAS-2023-1679)	6 Feb 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0020: git (ALINUX3-SA-2023:0020)	14 May 202500:00	–	nessus