Integer Overflow

🗓️ 18 Jan 2023 20:22:07Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 56 Views

git integer overflow vulnerability in commit formattin

Reporter	Title	Published	Views	Family All 210
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in Git [CVE-2022-41903]	6 Apr 202319:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.4.5 addresses multiple security vulnerabilities	17 Apr 202313:48	–	ibm
FreeBSD	git -- Heap overflow in `git archive`, `git log --format` leading to RCE	17 Jan 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : git, git-all, git-core (ALAS2023-2023-065)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : git, git-all, git-core (ALAS-2023-1923)	6 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : emacs-git, emacs-git-el, git (ALAS-2023-1679)	6 Feb 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0020: git (ALINUX3-SA-2023:0020)	14 May 202500:00	–	nessus

Vulners

Node

git gitMatch2.32.2-r0os

AND

git gitMatch2.32.1-r0os

AND

git gitMatch2.32.4-r0os

AND

git gitMatch2.31.1-r1os

AND

git gitMatch2.32.3-r0os

AND

git gitMatch2.32.0-r0os

AND

alpinelinux alpine_linuxMatch3.14

git gitMatch2.36.0-r0os

AND

git gitMatch2.36.1-r0os

AND

git gitMatch2.36.2-r0os

AND

git gitMatch2.36.3-r0os

AND

alpinelinux alpine_linuxMatch3.16

git gitMatch2.38.2-r0os

AND

git gitMatch2.38.1-r0os

AND

alpinelinux alpine_linuxMatch3.17

git gitMatch2.36.0-r0os

AND

git gitMatch2.39.0-r0os

AND

git gitMatch2.37.1-r0os

AND

git gitMatch2.35.1-r1os

AND

git gitMatch2.30.1-r0os

AND

git gitMatch2.38.1-r0os

AND

git gitMatch2.32.0-r2os

AND

git gitMatch2.34.1-r0os

AND

git gitMatch2.30.2-r0os

AND

git gitMatch2.32.0-r0os

AND

git gitMatch2.38.0-r1os

AND

git gitMatch2.37.0-r0os

AND

git gitMatch2.35.1-r0os

AND

git gitMatch2.31.1-r1os

AND

git gitMatch2.31.0-r0os

AND

git gitMatch2.37.1-r1os

AND

git gitMatch2.25.2-r0os

AND

git gitMatch2.25.1-r0os

AND

git gitMatch2.34.1-r1os

AND

git gitMatch2.33.0-r0os

AND

git gitMatch2.33.1-r0os

AND

git gitMatch2.26.1-r0os

AND

git gitMatch2.35.0-r0os

AND

git gitMatch2.32.0-r1os

AND

git gitMatch2.37.3-r1os

AND

git gitMatch2.27.0-r0os

AND

git gitMatch2.33.0-r2os

AND

git gitMatch2.26.2-r0os

AND

git gitMatch2.26.0-r0os

AND

git gitMatch2.37.3-r0os

AND

git gitMatch2.36.1-r0os

AND

alpinelinux alpine_linuxMatchedge

git gitMatch2.34.4-r0os

AND

git gitMatch2.33.1-r0os

AND

git gitMatch2.34.0-r0os

AND

git gitMatch2.34.2-r0os

AND

git gitMatch2.34.5-r0os

AND

git gitMatch2.34.1-r0os

AND

alpinelinux alpine_linuxMatch3.15

google bionicMatch1:2.17.0-1ubuntu1debian

AND

google bionicMatch1:2.17.1-1ubuntu0.9debian

AND

google bionicMatch1:2.17.1-1ubuntu0.7debian

AND

debian debian_linux

focal focalMatch1:2.25.1-1ubuntu3debian

AND

debian debian_linux

git gitMatch1:2.30.1-1debian

AND

git gitMatch1:2.29.2-1debian

AND

debian debian_linuxMatch999

git gitMatch1:2.29.2-1debian

AND

debian debian_linuxMatch11

git gitMatch1:2.20.1-2+deb10u3debian

AND

debian debian_linuxMatch10

Source	Link
secdb	www.secdb.alpinelinux.org/v3.17/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.16/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
github	www.github.com/git/git/commit/508386c6c5857b4faa2c3e491f422c98cc69ae76
github	www.github.com/git/git/security/advisories/GHSA-475x-2q3q-hvwq
git-scm	www.git-scm.com/book/en/v2/Customizing-Git-Git-Attributes
git-scm	www.git-scm.com/docs/pretty-formats
security	www.security.gentoo.org/glsa/202312-15

27 Dec 2023 11:25Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

EPSS0.17802

SSVC