CVE-2018-11235

Опубликовано: 30 мая 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Средний

Описание

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html
http://www.securityfocus.com/bid/104345
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040991
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:1957
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2147
Third Party Advisory
https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/
Patch
Technical Description
Vendor Advisory
https://marc.info/?l=git&m=152761328506724&w=2
Release Notes
Third Party Advisory
https://security.gentoo.org/glsa/201805-13
Third Party Advisory
https://usn.ubuntu.com/3671-1/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4212
Third Party Advisory
https://www.exploit-db.com/exploits/44822/
Exploit
Third Party Advisory
VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html
http://www.securityfocus.com/bid/104345
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040991
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:1957
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2147
Third Party Advisory
https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/
Patch
Technical Description
Vendor Advisory
https://marc.info/?l=git&m=152761328506724&w=2
Release Notes
Third Party Advisory
https://security.gentoo.org/glsa/201805-13
Third Party Advisory
https://usn.ubuntu.com/3671-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*

Версия до 2.13.6 (включая)

cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*

Версия от 2.14.0 (включая) до 2.14.3 (включая)

cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*

Версия от 2.15.0 (включая) до 2.15.1 (включая)

cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*

Версия от 2.16.0 (включая) до 2.16.3 (включая)

cpe:2.3:a:git-scm:git:2.17.0:*:*:*:*:*:*:*

Конфигурация 5

cpe:2.3:a:gitforwindows:git:*:*:*:*:*:*:*:*

Версия до 2.17.1 (включая)

EPSS

Процентиль: 97%

0.39682

Средний

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2018-11235

CVSS3: 7.8

ubuntu

больше 7 лет назад

CVE-2018-11235

CVSS3: 8.8

redhat

больше 7 лет назад

CVE-2018-11235

CVSS3: 7.8

debian

больше 7 лет назад

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16 ...

GHSA-v6w3-vcjx-mwhx

CVSS3: 7.8

github

больше 3 лет назад

ELSA-2018-1957

oracle-oval

больше 7 лет назад

ELSA-2018-1957: git security update (IMPORTANT)

EPSS

Процентиль: 97%

0.39682

Средний

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-22