Lucene search
OracleLinuxELSA-2020-2337HistoryMay 29, 2020 - 12:00 a.m.
git security update
2020-05-2900:00:00
linux.oracle.com
86
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
[1.8.3.1-23]
- Prevent crafted URL containing new lines, empty host or lacks a scheme
to cause credential leak.
Resolves: CVE-2020-11008
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | git | < 1.8.3.1-23.el7_8 | git-1.8.3.1-23.el7_8.src.rpm |
| oracle linux | 7 | noarch | emacs-git | < 1.8.3.1-23.el7_8 | emacs-git-1.8.3.1-23.el7_8.noarch.rpm |
| oracle linux | 7 | noarch | emacs-git-el | < 1.8.3.1-23.el7_8 | emacs-git-el-1.8.3.1-23.el7_8.noarch.rpm |
| oracle linux | 7 | aarch64 | git | < 1.8.3.1-23.el7_8 | git-1.8.3.1-23.el7_8.aarch64.rpm |
| oracle linux | 7 | noarch | git-all | < 1.8.3.1-23.el7_8 | git-all-1.8.3.1-23.el7_8.noarch.rpm |
| oracle linux | 7 | noarch | git-bzr | < 1.8.3.1-23.el7_8 | git-bzr-1.8.3.1-23.el7_8.noarch.rpm |
| oracle linux | 7 | noarch | git-cvs | < 1.8.3.1-23.el7_8 | git-cvs-1.8.3.1-23.el7_8.noarch.rpm |
| oracle linux | 7 | aarch64 | git-daemon | < 1.8.3.1-23.el7_8 | git-daemon-1.8.3.1-23.el7_8.aarch64.rpm |
| oracle linux | 7 | noarch | git-email | < 1.8.3.1-23.el7_8 | git-email-1.8.3.1-23.el7_8.noarch.rpm |
| oracle linux | 7 | aarch64 | git-gnome-keyring | < 1.8.3.1-23.el7_8 | git-gnome-keyring-1.8.3.1-23.el7_8.aarch64.rpm |
Related
nessus
nessus
Photon OS 2.0: Git PHSA-2020-2.0-0243
2020-05-18 00:00:00
Debian DSA-4659-1 : git - security update
2020-04-21 00:00:00
apple
apple
About the security content of Xcode 11.5
2020-05-20 00:00:00
About the security content of Xcode 11.5 - Apple Support
2020-05-20 05:26:39
debian
debian
[SECURITY] [DLA 2182-1] git security update
2020-04-24 00:38:59
[SECURITY] [DSA 4659-1] git security update
2020-04-20 18:50:32
[SECURITY] [DSA 4659-1] git security update
2020-04-20 18:50:32
veracode
veracode
Information Disclosure
2020-04-30 02:23:55
openvas
openvas
CentOS: Security Advisory for emacs-git (CESA-2020:2337)
2020-06-02 00:00:00
Debian: Security Advisory (DSA-4659-1)
2020-04-21 00:00:00
Debian: Security Advisory (DLA-2182-1)
2020-04-24 00:00:00
redhat
redhat
(RHSA-2020:1978) Important: git security update
2020-04-30 09:12:15
(RHSA-2020:1980) Important: git security update
2020-04-30 09:14:07
(RHSA-2020:2337) Important: git security update
2020-05-28 18:12:43
ubuntu
ubuntu
Git vulnerability
2020-04-21 00:00:00
photon
photon
osv
osv
git - security update
2020-04-23 00:00:00
git - security update
2020-04-20 00:00:00
BIT-git-2020-5260
2024-03-06 10:52:15
altlinux
altlinux
Security fix for the ALT Linux 9 package git version 2.25.4-alt1
2020-04-21 00:00:00
Security fix for the ALT Linux 10 package git version 2.25.4-alt1
2020-04-19 00:00:00
oraclelinux
oraclelinux
git security update
2020-05-07 00:00:00
centos
centos
emacs, git, gitk, gitweb, perl security update
2020-06-01 17:28:40
freebsd
freebsd
malicious URLs can cause git to send a stored credential to wrong server
2020-04-20 00:00:00
Gitlab -- Multiple Vulnerabilities
2020-04-30 00:00:00
cloudfoundry
cloudfoundry
USN-4334-1: Git vulnerability | Cloud Foundry
2020-05-14 00:00:00
redhatcve
redhatcve
CVE-2020-11008
2020-04-21 01:34:03
prion
prion
Directory traversal
2020-04-21 19:15:00
debiancve
debiancve
CVE-2020-11008
2020-04-21 19:15:00
cve
cve
CVE-2020-11008
2020-04-21 19:15:00
attackerkb
attackerkb
CVE-2020-5260
2020-04-14 00:00:00
alpinelinux
alpinelinux
CVE-2020-11008
2020-04-21 19:15:00
fedora
fedora
[SECURITY] Fedora 30 Update: git-2.21.3-1.fc30
2020-05-01 04:54:13
[SECURITY] Fedora 32 Update: git-2.26.2-1.fc32
2020-04-27 02:46:35
[SECURITY] Fedora 31 Update: git-2.25.4-1.fc31
2020-04-26 02:50:14
gentoo
gentoo
Git: Information disclosure
2020-04-23 00:00:00
slackware
slackware
[slackware-security] git
2020-04-22 03:14:47
ubuntucve
ubuntucve
CVE-2020-11008
2020-04-20 00:00:00
archlinux
archlinux
[ASA-202004-21] git: information disclosure
2020-04-22 00:00:00
amazon
amazon
Important: git
2020-07-28 17:23:00
Important: git
2020-05-05 01:11:00
mageia
mageia
Updated git packages fix security vulnerability
2020-04-24 20:03:35
suse
suse
Security update for git (moderate)
2020-05-02 00:00:00
ibm
ibm
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related for ELSA-2020-2337