Veracode Vulnerability DatabaseVERACODE:12544Remote Code Execution (RCE)
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
rh-git29-git is vulnerable to remote code execution (RCE) attacks. The vulnerability exists as a malicious third-party can give a crafted “ssh://…” URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim’s machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running “git clone --recurse-submodules” to trigger the vulnerability.
References
www.debian.org/security/2017/dsa-3934
www.securityfocus.com/bid/100283
www.securitytracker.com/id/1039131
access.redhat.com/errata/RHSA-2017:2484
access.redhat.com/errata/RHSA-2017:2485
access.redhat.com/errata/RHSA-2017:2491
access.redhat.com/errata/RHSA-2017:2674
access.redhat.com/errata/RHSA-2017:2675
access.redhat.com/security/updates/classification/#important
security.gentoo.org/glsa/201709-10
support.apple.com/HT208103
www.exploit-db.com/exploits/42599/
www.mail-archive.com/[email protected]/msg1466490.html
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P