Lucene search

K
redhatcveRedhat.comRH:CVE-2024-32004
HistoryMay 14, 2024 - 11:56 p.m.

CVE-2024-32004

2024-05-1423:56:55
redhat.com
access.redhat.com
17
git
code execution
vulnerability
patched
version 2.45.1
version 2.44.1
version 2.43.4
version 2.42.2
version 2.41.1
version 2.40.2
version 2.39.4

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.1%

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.

Mitigation

Exercise caution when cloning repositories from untrusted sources.