Описание
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 1:2.17.1-1ubuntu0.5 |
| devel | released | 1:2.25.0-1ubuntu1 |
| disco | released | 1:2.20.1-2ubuntu1.19.04.1 |
| eoan | released | 1:2.20.1-2ubuntu1.19.10.1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | released | 1:2.17.1-1ubuntu0.5 |
| esm-infra/xenial | released | 1:2.7.4-0ubuntu1.7 |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE |
Показывать по
EPSS
3.6 Low
CVSS2
3.3 Low
CVSS3
Связанные уязвимости
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths.
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths.
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v ...
Уязвимость опции быстрого импорта --export-marks распределенной системы управления версиями Git, позволяющая нарушителю вызвать отказ в обслуживании и оказать воздействие на целостность данных
EPSS
3.6 Low
CVSS2
3.3 Low
CVSS3