Lucene search

K
ubuntuUbuntuUSN-6793-1
HistoryMay 28, 2024 - 12:00 a.m.

Git vulnerabilities

2024-05-2800:00:00
ubuntu.com
16
ubuntu
git
security
submodules
arbitrary code
cloned repositories
local clones
hardlinked files
symlinks
integrity
availability

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.2%

Releases

  • Ubuntu 24.04 LTS
  • Ubuntu 23.10
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • git - fast, scalable, distributed revision control system

Details

It was discovered that Git incorrectly handled certain submodules.
An attacker could possibly use this issue to execute arbitrary code.
This issue was fixed in Ubuntu 22.04 LTS, Ubuntu 23.10 and Ubuntu 24.04 LTS.
(CVE-2024-32002)

It was discovered that Git incorrectly handled certain cloned repositories.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2024-32004)

It was discovered that Git incorrectly handled local clones with hardlinked
files/directories. An attacker could possibly use this issue to place a
specialized repository on their target’s local system. (CVE-2024-32020)

It was discovered that Git incorrectly handled certain symlinks. An attacker
could possibly use this issue to impact availability and integrity
creating hardlinked arbitrary files into users repository’s objects/directory.
(CVE-2024-32021)

It was discovered that Git incorrectly handled certain cloned repositories.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2024-32465)

OSVersionArchitecturePackageVersionFilename
Ubuntu24.04noarchgit< 1:2.43.0-1ubuntu7.1UNKNOWN
Ubuntu24.04noarchgit-all< 1:2.43.0-1ubuntu7.1UNKNOWN
Ubuntu24.04noarchgit-cvs< 1:2.43.0-1ubuntu7.1UNKNOWN
Ubuntu24.04noarchgit-daemon-run< 1:2.43.0-1ubuntu7.1UNKNOWN
Ubuntu24.04noarchgit-daemon-sysvinit< 1:2.43.0-1ubuntu7.1UNKNOWN
Ubuntu24.04noarchgit-dbgsym< 1:2.43.0-1ubuntu7.1UNKNOWN
Ubuntu24.04noarchgit-doc< 1:2.43.0-1ubuntu7.1UNKNOWN
Ubuntu24.04noarchgit-email< 1:2.43.0-1ubuntu7.1UNKNOWN
Ubuntu24.04noarchgit-gui< 1:2.43.0-1ubuntu7.1UNKNOWN
Ubuntu24.04noarchgit-man< 1:2.43.0-1ubuntu7.1UNKNOWN
Rows per page:
1-10 of 571

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.2%