Lucene search
K

10056 matches found

RedhatCVE
RedhatCVE
added 2018/05/30 12:49 a.m.34 views

CVE-2018-11233

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory...

7.5CVSS1.8AI score0.0031EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2018/05/30 12:49 a.m.32 views

CVE-2018-11235

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because...

8.8CVSS2.2AI score0.4172EPSS
Exploits10References2
Tenable Nessus
Tenable Nessus
added 2018/05/30 12:0 a.m.35 views

Debian DSA-4212-1 : git - security update

Etienne Stalmans discovered that git, a fast, scalable, distributed revision control system, is prone to an arbitrary code execution vulnerability exploitable via specially crafted submodule names in a .gitmodules file. C Tenable Network Security, Inc. The descriptive text and package checks in...

7.8CVSS7.8AI score0.4172EPSS
Exploits10References5
UbuntuCve
UbuntuCve
added 2018/05/30 12:0 a.m.42 views

CVE-2018-11235

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because...

7.8CVSS7.7AI score0.4172EPSS
Exploits10References3
Gentoo Linux
Gentoo Linux
added 2018/05/30 12:0 a.m.532 views

Git: Multiple vulnerabilities

Background Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Description Multiple vulnerabilities have been discovered in Git. Please review the CVE identifiers referenced below for details...

7.8CVSS2.1AI score0.4172EPSS
Exploits10
Tenable Nessus
Tenable Nessus
added 2018/05/30 12:0 a.m.29 views

GLSA-201805-13 : Git: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201805-13 Git: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Git. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could execute arbitrary code on both client an...

7.8CVSS8.2AI score0.4172EPSS
Exploits10References3
OSV
OSV
added 2018/05/30 12:0 a.m.0 views

UBUNTU-CVE-2018-11233

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory...

7.5CVSS7.2AI score0.0031EPSS
Exploits0References4
CNVD
CNVD
added 2018/05/30 12:0 a.m.1 views

Git Arbitrary Code Execution Vulnerability (CNVD-2018-10794)

Git is a free and open source distributed version control system designed to handle small to large projects with speed and efficiency. An arbitrary code execution vulnerability exists in Git due to the software's failure to properly validate submodule "names" provided via untrusted .gitmodules...

7.8CVSS8.3AI score0.4172EPSS
Exploits10References1
CNVD
CNVD
added 2018/05/30 12:0 a.m.2 views

Git Information Disclosure Vulnerability

Git is a free and open source distributed version control system designed to handle small to large projects with speed and efficiency. Git suffers from an information disclosure vulnerability due to a Git input validation flaw that can be exploited by an attacker to read the contents of randomize...

7.5CVSS6.2AI score0.0031EPSS
Exploits0References1
OSV
OSV
added 2018/05/30 12:0 a.m.1 views

UBUNTU-CVE-2018-11235

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because...

7.8CVSS7.8AI score0.4172EPSS
Exploits10References4
UbuntuCve
UbuntuCve
added 2018/05/30 12:0 a.m.19 views

CVE-2018-11233

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory...

7.5CVSS7.2AI score0.0031EPSS
Exploits0References3
Debian
Debian
added 2018/05/29 8:44 p.m.34 views

[SECURITY] [DSA 4212-1] git security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4212-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 29, 2018 https://www.debian.org/security/faq -...

6.8CVSS3.1AI score0.4172EPSS
Exploits10
Debian
Debian
added 2018/05/29 8:44 p.m.29 views

[SECURITY] [DSA 4212-1] git security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4212-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 29, 2018 https://www.debian.org/security/faq -...

7.8CVSS8.1AI score0.4172EPSS
Exploits10
FreeBSD
FreeBSD
added 2018/05/29 12:0 a.m.39 views

Libgit2 -- Fixing insufficient validation of submodule names

The Git community reports: Insufficient validation of submodule names...

7.8CVSS2.3AI score0.4172EPSS
Exploits10References1
FreeBSD
FreeBSD
added 2018/05/29 12:0 a.m.35 views

Git -- Fix memory out-of-bounds and remote code execution vulnerabilities (CVE-2018-11233 and CVE-2018-11235)

The Git community reports: In affected versions of Git, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory. In affected versions of Git, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machin...

7.8CVSS3.2AI score0.4172EPSS
Exploits10References2
OSV
OSV
added 2018/05/29 12:0 a.m.35 views

DSA-4212-1 git - security update

Bulletin has no description...

7.8CVSS7.9AI score0.4172EPSS
Exploits10
OpenVAS
OpenVAS
added 2018/05/28 12:0 a.m.59 views

Debian: Security Advisory (DSA-4212-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.1AI score0.4172EPSS
Exploits10References4
NVD
NVD
added 2018/05/24 1:29 p.m.21 views

CVE-2018-1000199

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modifyuserhwbreakpoint that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in...

5.5CVSS6.9AI score0.00478EPSS
Exploits0References15
Prion
Prion
added 2018/05/24 1:29 p.m.42 views

Design/Logic Flaw

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modifyuserhwbreakpoint that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in...

4.9CVSS6.7AI score0.00478EPSS
Exploits0References15Affected Software10
Debian CVE
Debian CVE
added 2018/05/24 1:0 p.m.52 views

CVE-2018-1000199

The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modifyuserhwbreakpoint that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears to have been fixed in...

5.5CVSS7.5AI score0.00478EPSS
Exploits0
Rows per page
Query Builder