Описание
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
EPSS
5 Medium
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).
GIT version 2.15.1 and earlier contains a Input Validation Error vulne ...
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).
ALT-PU-2018-2090: package `git` update to version 2.17.1-alt2
EPSS
5 Medium
CVSS3
6.8 Medium
CVSS2