Lucene search
+L

15311 matches found

osv_ghsa
osv_ghsa
•added 2024/09/06 7:55 p.m.•33 views

GHSA-M8RP-VV92-46C7 gix-path improperly resolves configuration path reported by Git

Summary gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or non-ASCII characters, in rare cases enabling a local attacker to inject configuration leading to code execution. Details In gixpath::env, th...

6CVSS6.9AI score0.00257EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2024/09/06 7:55 p.m.•45 views

gix-path improperly resolves configuration path reported by Git

Summary gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or non-ASCII characters, in rare cases enabling a local attacker to inject configuration leading to code execution. Details In gixpath::env, th...

6CVSS6.3AI score0.00257EPSS
SaveExploits0References6Affected Software1
osv_ubuntu
osv_ubuntu
•added 2024/09/06 1:15 p.m.•23 views

UBUNTU-CVE-2024-45405

gix-path is a crate of the gitoxide project an implementation of git written in Rust dealing paths and their conversions. Prior to version 0.10.11, gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or...

6CVSS5.8AI score0.00257EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/09/06 1:10 p.m.•56 views

CVE-2024-45405 gix-path improperly resolves configuration path reported by Git

gix-path is a crate of the gitoxide project an implementation of git written in Rust dealing paths and their conversions. Prior to version 0.10.11, gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or...

6CVSS0.00257EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/09/06 1:10 p.m.•34 views

CVE-2024-45405 gix-path improperly resolves configuration path reported by Git

gix-path is a crate of the gitoxide project an implementation of git written in Rust dealing paths and their conversions. Prior to version 0.10.11, gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or...

6CVSS6.9AI score
SaveExploits0References5
RustSec
RustSec
•added 2024/09/06 12:00 p.m.•16 views

gix-path improperly resolves configuration path reported by Git

Summary gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or non-ASCII characters, in rare cases enabling a local attacker to inject configuration leading to code execution. Details In gixpath::env, th...

7.2AI score
SaveExploits0Affected Software1
osv_rustsec
osv_rustsec
•added 2024/09/06 12:00 p.m.•47 views

RUSTSEC-2024-0371 gix-path improperly resolves configuration path reported by Git

Summary gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or non-ASCII characters, in rare cases enabling a local attacker to inject configuration leading to code execution. Details In gixpath::env, th...

6CVSS6.9AI score0.00257EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/09/06 12:00 a.m.•14 views

PT-2024-31609 · Gix-Path +2 · Gix-Path +2

Name of the Vulnerable Software and Affected Versions: gix-path versions prior to 0.10.11 Description: The issue concerns the improper resolution of paths containing unusual or non-ASCII characters by gix-path, which can enable a local attacker to inject configuration leading to code execution in...

6CVSS7.1AI score0.00257EPSS
SaveExploits0References35
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/06 12:00 a.m.•5 views

CVE-2024-45405: Improper Resolution of Path Equivalence

gix-path is a crate of the gitoxide project an implementation of git written in Rust dealing paths and their conversions. Prior to version 0.10.11, gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or...

6CVSS5.9AI score0.00257EPSS
SaveExploits0References1
FreeBSD Advisory
FreeBSD Advisory
•added 2024/09/04 12:00 a.m.•39 views

FreeBSD-SA-24:14.umtx

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-24:14.umtx Security Advisory The FreeBSD Project Topic: umtx Kernel panic or Use-After-Free Category: core Module: kern Announced: 2024-09-04 Credits: Synacktiv...

10CVSS8.3AI score0.00681EPSS
SaveExploits2
osv_ghsa
osv_ghsa
•added 2024/09/03 8:21 p.m.•20 views

GHSA-V26R-4C9C-H3J6 gix-path uses local config across repos when it is the highest scope

Summary gix-path executes git to find the path of a configuration file that belongs to the git installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped configuration is found. In rare cases, this causes a less trusted repository to be...

2.5CVSS3.6AI score0.00244EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2024/09/03 8:21 p.m.•55 views

gix-path uses local config across repos when it is the highest scope

Summary gix-path executes git to find the path of a configuration file that belongs to the git installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped configuration is found. In rare cases, this causes a less trusted repository to be...

2.5CVSS5.9AI score0.00244EPSS
SaveExploits0References7Affected Software1
RedHat Linux
RedHat Linux
•added 2024/09/03 11:45 a.m.•20 views

go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

A path traversal vulnerability was discovered in the go library go-git. This issue may allow an attacker to create and amend files across the filesystem when applications are using the default ChrootOS, potentially allowing remote code execution...

9.8CVSS7.3AI score0.0151EPSS
SaveExploits0References5
Debian
Debian
•added 2024/09/03 10:14 a.m.•32 views

[SECURITY] [DLA 3867-1] git security update

Debian LTS Advisory DLA-3867-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton September 03, 2024 https://wiki.debian.org/LTS Package : git Version : 1:2.30.2-1+deb11u3 CVE ID : CVE-2019-1387 CVE-2023-25652 CVE-2023-25815 CVE-2023-29007 CVE-2024-32002 CVE-2024-32004...

9CVSS7AI score0.51883EPSS
SaveExploits35
Tenable Nessus
Tenable Nessus
•added 2024/09/03 12:00 a.m.•37 views

Debian dla-3867 : git - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3867 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3867-1 [email protected]...

9CVSS7.1AI score0.51883EPSS
SaveExploits35References18
osv_dla
osv_dla
•added 2024/09/03 12:00 a.m.•23 views

DLA-3867-1 git - security update

Bulletin has no description...

9CVSS6.6AI score0.51883EPSS
SaveExploits35
OpenVAS
OpenVAS
•added 2024/09/03 12:00 a.m.•11 views

Debian: Security Advisory (DLA-3867-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS6.8AI score0.51883EPSS
SaveExploits35References2
NVD
NVD
•added 2024/09/02 6:15 p.m.•32 views

CVE-2024-45305

gix-path is a crate of the gitoxide project dealing with git paths and their conversions. gix-path executes git to find the path of a configuration file that belongs to the git installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped...

2.5CVSS0.00244EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2024/09/02 6:15 p.m.•8 views

DEBIAN-CVE-2024-45305

gix-path is a crate of the gitoxide project dealing with git paths and their conversions. gix-path executes git to find the path of a configuration file that belongs to the git installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped...

2.5CVSS5.3AI score0.00244EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/09/02 4:30 p.m.•37 views

CVE-2024-45305 gix-path uses local config across repos when it is the highest scope

gix-path is a crate of the gitoxide project dealing with git paths and their conversions. gix-path executes git to find the path of a configuration file that belongs to the git installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped...

2.5CVSS5.7AI score
SaveExploits0References6
Rows per page
Query Builder