Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-1000021

Опубликовано: 09 фев. 2018
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 6.8
CVSS3: 5

Описание

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

ignored

disco

ignored

end of life
eoan

ignored

end of life
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
esm-infra/bionic

ignored

esm-infra/focal

ignored

esm-infra/xenial

ignored

will not fix

Показывать по

EPSS

Процентиль: 58%
0.00372
Низкий

6.8 Medium

CVSS2

5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5
redhat
около 8 лет назад

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

CVSS3: 5
nvd
почти 8 лет назад

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

CVSS3: 5
debian
почти 8 лет назад

GIT version 2.15.1 and earlier contains a Input Validation Error vulne ...

CVSS3: 8.8
github
больше 3 лет назад

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

EPSS

Процентиль: 58%
0.00372
Низкий

6.8 Medium

CVSS2

5 Medium

CVSS3