Lucene search

K
osvGoogleOSV:USN-6050-2
HistoryMay 17, 2023 - 1:56 p.m.

git vulnerabilities

2023-05-1713:56:26
Google
osv.dev
3

8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.1%

USN-6050-1 fixed several vulnerabilities in Git. This update provides
the corresponding updates for CVE-2023-25652 and CVE-2023-29007 on
Ubuntu 16.04 LTS.

Original advisory details:

It was discovered that Git incorrectly handled certain commands.
An attacker could possibly use this issue to overwrite paths.
(CVE-2023-25652)

André Baptista and Vítor Pinho discovered that Git incorrectly handled
certain configurations. An attacker could possibly use this issue
to achieve arbitrary configuration injection. (CVE-2023-29007)