11 matches found
PT-2024-8434
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the handling of HCI EV IO CAPA REQUEST in the Linux kernel's hci event component. If HCI EV IO CAPA REQUEST is received while HCI OP READ REMOTE EXT FEATURES is y...
Arbitrary Shell Command Execution
Git-fastclone has a flaw that permits execution of arbitrary shell commands from .gitmodules. Attackers can trigger the execution by instructing a user to run a recursive clone from a repository they control. The attack is possible only if a user configures Git to automatically clone submodules...
CVE-2015-7545
The 1 git-remote-ext and 2 unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a a .gitmodules file ...
CVE-2015-7545: Improper Input Validation
The 1 git-remote-ext and 2 unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a a .gitmodules file ...
Apple Xcode < 7.2 Multiple Vulnerabilities (Mac OS X)
The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.2. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to a flaw in the otools component that is triggered when handling Mach-O files. A remote attacker c...
USN-2835-1 git vulnerability
Blake Burkhart discovered that the Git git-remote-ext helper incorrectly handled recursive clones of git repositories. A remote attacker could possibly use this issue to execute arbitrary code by injecting commands via crafted URLs...
Amazon Linux AMI : git (ALAS-2015-613)
A flaw was found in the way the git-remote-ext helper processed certain URLs. If a user had Git configured to automatically clone submodules from untrusted repositories, an attacker could inject commands into the URL of a submodule, allowing them to execute arbitrary code on the user's system. C...
Medium: git
Issue Overview: A flaw was found in the way the git-remote-ext helper processed certain URLs. If a user had Git configured to automatically clone submodules from untrusted repositories, an attacker could inject commands into the URL of a submodule, allowing them to execute arbitrary code on the...
Moderate: Red Hat Security Advisory: git security update
Updated git packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from th...
PT-2015-7563
Name of the Vulnerable Software and Affected Versions Git versions prior to 2.3.10 Git versions 2.4.x prior to 2.4.10 Git versions 2.5.x prior to 2.5.4 Git versions 2.6.x prior to 2.6.1 Description The issue is related to the git-remote-ext and other remote helper programs in Git, which do not...
PT-2015-7928
Name of the Vulnerable Software and Affected Versions git versions prior to 2.3.10 Description The issue involves buffer and integer overflow problems with long file path names and large files. Additionally, there is a remote code execution flaw with certain protocols, such as git-remote-ext, and...