AZL-13026 CVE-2022-41903 affecting package git for versions less than 2.33.8-2

🗓️ 17 Jan 2023 23:15:15Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

AZL-13026 CVE-2022-41903: git <2.33.8-2 may allow code execution via archive formatting; upgrade.

Reporter	Title	Published	Views	Family All 211
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in Git [CVE-2022-41903]	6 Apr 202319:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.4.5 addresses multiple security vulnerabilities	17 Apr 202313:48	–	ibm
FreeBSD	git -- Heap overflow in `git archive`, `git log --format` leading to RCE	17 Jan 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : git, git-all, git-core (ALAS2023-2023-065)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : git, git-all, git-core (ALAS-2023-1923)	6 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : emacs-git, emacs-git-el, git (ALAS-2023-1679)	6 Feb 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0020: git (ALINUX3-SA-2023:0020)	14 May 202500:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41903

21 Apr 2026 04:22Current

7.8High risk

Vulners AI Score7.8

CVSS 3.19.8

EPSS0.17802

code execution integer overflow archive formatting git versions below disable git archive daemon upload arch