Lucene search

K
redosRedosROS-20240527-04
HistoryMay 27, 2024 - 12:00 a.m.

ROS-20240527-04

2024-05-2700:00:00
redos.red-soft.ru
7
git
vulnerability
execute arbitrary code
hard links
bypass protections
unix
distributed version control
security
process control
exploitation
restricted directory
untrusted repositories
object database
pre-installed data

8.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

A vulnerability in the Git distributed version control system exists due to a process control issue.
Exploitation of the vulnerability could allow an attacker to execute arbitrary code when cloning
specially crafted local repositories

A vulnerability in the Git distributed version control system is related to another user accessing the object database of the target
repository database of another user. Exploitation of the vulnerability could allow an attacker to create hard links to arbitrary files accessible by another user.
links to arbitrary read-only files on the same file system

A vulnerability in the Git distributed version control system is related to incorrectly restricting the path name of the
to a restricted directory. Exploitation of the vulnerability could allow an attacker to bypass protections by
cloning untrusted repositories

A vulnerability in the Git distributed version control system is related to the use of pre-installed data,
related to security. Exploitation of the vulnerability could allow an attacker to create hard links
to arbitrary read-only files on the same file system

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64git<= 2.44.1-1UNKNOWN

8.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%