Lucene search
UbuntuUSN-5686-1HistoryOct 18, 2022 - 12:00 a.m.
Git vulnerabilities
2022-10-1800:00:00
ubuntu.com
35
git
ubuntu
vulnerabilities
arbitrary code execution
symbolic links
unexpected behavior
cve-2022-39253
cve-2022-39260
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.2
Confidence
Low
EPSS
0.011
Percentile
84.4%
Releases
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
Packages
- git - fast, scalable, distributed revision control system
Details
Cory Snider discovered that Git incorrectly handled certain symbolic links.
An attacker could possibly use this issue to cause an unexpected behaviour.
(CVE-2022-39253)
Kevin Backhouse discovered that Git incorrectly handled certain command strings.
An attacker could possibly use this issue to arbitrary code execution.
(CVE-2022-39260)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | git | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | git-all | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | git-cvs | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | git-daemon-run | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | git-daemon-sysvinit | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | git-dbgsym | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | git-doc | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | git-email | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | git-gui | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
| Ubuntu | 22.04 | noarch | git-man | < 1:2.34.1-1ubuntu1.5 | UNKNOWN |
Related
nessus
nessus
Amazon Linux AMI : git (ALAS-2022-1653)
2022-12-10 00:00:00
EulerOS 2.0 SP11 : git (EulerOS-SA-2023-1034)
2023-01-05 00:00:00
SUSE SLES12 Security Update : git (SUSE-SU-2022:4271-1)
2022-11-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5686-1)
2022-10-19 00:00:00
Slackware: Security Advisory (SSA:2022-291-01)
2022-10-19 00:00:00
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2023-1502)
2023-03-09 00:00:00
osv
osv
git vulnerabilities
2022-10-18 17:59:28
git-2.38.1-1.1 on GA media
2024-06-15 00:00:00
git - security update
2022-12-13 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: git-2.38.1-1.fc36
2022-10-28 11:15:54
[SECURITY] Fedora 35 Update: git-2.38.1-1.fc35
2022-11-02 15:46:46
[SECURITY] Fedora 37 Update: git-2.38.1-1.fc37
2022-11-10 22:48:58
freebsd
freebsd
git -- Multiple vulnerabilities
2022-06-09 00:00:00
git -- Local clone-based data exfiltration with non-local transports
2023-02-14 00:00:00
ubuntu
ubuntu
Git vulnerabilities
2022-11-21 00:00:00
Git vulnerability
2022-11-17 00:00:00
Git vulnerability
2023-03-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package git version 2.33.5-alt1
2022-10-22 00:00:00
slackware
slackware
[slackware-security] git
2022-10-18 20:40:51
[slackware-security] git
2023-02-15 19:51:52
cloudfoundry
cloudfoundry
USN-5686-1: Git vulnerabilities | Cloud Foundry
2022-12-07 00:00:00
github
github
Git security vulnerabilities announced
2022-10-18 17:11:45
Container build can leak any path on the host into the container
2022-11-11 00:03:31
Git security vulnerabilities announced
2023-02-14 18:45:56
amazon
amazon
kaspersky
kaspersky
KLA20184 Multiple vulnerabilities in Git for Windows
2022-10-18 00:00:00
KLA20040 Multiple vulnerabilities in Microsoft Developer Tools
2022-11-08 00:00:00
mageia
mageia
Updated git packages fix security vulnerability
2022-10-28 09:54:08
Updated git packages fix security vulnerability
2023-02-27 23:27:16
redhat
redhat
(RHSA-2023:2319) Moderate: git security and bug fix update
2023-05-09 05:07:19
(RHSA-2023:2859) Moderate: git security and bug fix update
2023-05-16 05:56:35
(RHSA-2024:0407) Moderate: git security update
2024-01-24 14:40:19
debian
debian
[SECURITY] [DLA 3239-2] git regression update
2022-12-14 18:36:03
[SECURITY] [DLA 3239-1] git security update
2022-12-13 22:36:52
[SECURITY] [DSA 5332-1] git security update
2023-01-29 16:59:53
oraclelinux
oraclelinux
git security and bug fix update
2023-05-15 00:00:00
git security and bug fix update
2023-05-23 00:00:00
almalinux
almalinux
Moderate: git security and bug fix update
2023-05-09 00:00:00
Moderate: git security and bug fix update
2023-05-16 00:00:00
apple
apple
About the security content of Xcode 14.1
2022-11-01 00:00:00
cvelist
cvelist
prion
prion
Heap overflow
2022-10-19 12:15:00
Design/Logic Flaw
2022-10-19 11:15:00
Design/Logic Flaw
2023-02-14 20:15:00
veracode
veracode
Heap-based Buffer Overflow
2022-10-20 19:48:22
Information Disclosure
2022-10-20 19:55:20
nvd
nvd
photon
photon
Important Photon OS Security Update - PHSA-2022-3.0-0486
2022-11-11 00:00:00
Important Photon OS Security Update - PHSA-2022-0538
2022-11-09 00:00:00
alpinelinux
alpinelinux
ubuntucve
ubuntucve
cve
cve
debiancve
debiancve
wolfi
wolfi
CVE-2022-39260 vulnerabilities
2024-09-30 09:32:54
CVE-2022-39253 vulnerabilities
2024-09-30 09:32:54
cgr
cgr
CVE-2022-39260 vulnerabilities
2024-05-19 03:07:16
CVE-2022-39253 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
mscve
mscve
githubexploit
githubexploit
rosalinux
rosalinux
Advisory ROSA-SA-2023-2292
2023-11-14 13:25:27
Advisory ROSA-SA-2024-2398
2024-04-11 08:08:00
vulnrichment
vulnrichment
cloudlinux
cloudlinux
git: Fix of 4 CVEs
2023-02-24 09:34:40
gentoo
gentoo
Git: Multiple Vulnerabilities
2023-12-27 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.2
Confidence
Low
EPSS
0.011
Percentile
84.4%
Related for USN-5686-1