GO-2023-1515 Denial of service when processing Git credentials in github.com/rancher/wrangler

A denial of service DoS vulnerability exists in the Wrangler Git package. Specially crafted Git credentials can result in a denial of service DoS attack on an application that uses Wrangler due to the exhaustion of the available memory and CPU resources. This is caused by a lack of input validati...

Remote Code Execution

ruby-git:sid is vulnerable to Remote Code Execution. The vulnerability allows an attacker to remotely execute arbitrary code by getting a user to load a repository containing a specially crafted filename to the product...

CVE-2023-23946

Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to git apply, a path outside the working tree can be overwritten as the user who is running git apply. A...

CVE-2023-22490

Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort loca...

GitHub: CVE-2022-41953 Git GUI Clone Remote Code Execution Vulnerability

...

CVE-2022-41953 affecting package git 2.23.4-2

CVE-2022-41953 affecting package git 2.23.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-23521 affecting package git 2.23.4-2

CVE-2022-23521 affecting package git 2.23.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-41903 affecting package git 2.23.4-2

CVE-2022-41903 affecting package git 2.23.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-22743: Untrusted Search Path

Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, by carefully crafting DLL and putting into a subdirectory of a specific name living next to the Git for Windows installer, Windows can be tricked into side-loading said DLL. This...

CVE-2023-23618: Untrusted Search Path

Git for Windows is the Windows port of the revision control system Git. Prior to Git for Windows version 2.39.2, when gitk is run on Windows, it potentially runs executables from the current directory inadvertently, which can be exploited with some social engineering to trick users into running...

Git post-receive link vulnerability

Git is a free, open source distributed version control system. Git has a security vulnerability. An attacker has exploited this vulnerability to cause a data leak. The following versions are affected: version 2.39 up to and including 2.39.2, version 2.38 up to and including 2.38.4, version 2.37 u...

KLA20236 Multiple vulnerabilities in Git for Windows

Multiple vulnerabilities were found in Git for Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Remote code execution vulnerability in Git can be exploited remotely to execute...

PT-2023-1980

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.39.2 Git versions prior to 2.38.4 Git versions prior to 2.37.6 Git versions prior to 2.36.5 Git versions prior to 2.35.7 Git versions prior to 2.34.7 Git versions prior to 2.33.7 Git versions prior to 2.32.6 Git version...

Git code issues and vulnerabilities

Git is a free, open source distributed version control system. A security vulnerability exists in versions of Git prior to 2.39.2, which stems from the ability to inadvertently run an executable file in the current directory...

PT-2023-5951 · Git · Git For Windows

Name of the Vulnerable Software and Affected Versions: Git for Windows versions prior to 2.39.2 Description: The issue is related to the Windows port of the revision control system Git. By carefully crafting a DLL and placing it into a subdirectory of a specific name next to the Git for Windows...

CVE-2023-23946: Improper Limitation of a Pathname to a Restricted Directory

Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to git apply, a path outside the working tree can be overwritten as the user who is running git apply. A...

PT-2023-1979

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 Description The issue is related to Git's handling of symbolic links when using local clone optimization. Although Git aborts local clones...

CVE-2023-22490: Improper Link Resolution Before File Access

Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort loca...

Git path traversal vulnerability

Git is a free, open source distributed version control system. Git has a security vulnerability. An attacker could use this vulnerability to access files and directories stored outside of the web root folder. The following versions are affected: version 2.39 up to and including version 2.39.2,...

Git code issues and vulnerabilities

Git is a free, open source distributed version control system. A security vulnerability exists in Git versions prior to 2.39.2. An attacker could exploit this vulnerability to place a malicious payload in the Git for Windows installer...