Количество 11
Количество 11
CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.
CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.
CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.
CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsus ...
openSUSE-SU-2017:2331-1
Security update for git
openSUSE-SU-2017:2182-1
Security update for git
SUSE-SU-2017:2320-1
Security update for git
SUSE-SU-2017:2225-1
Security update for git
GHSA-q5x8-47cx-6m4p
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.
ELSA-2017-2485
ELSA-2017-2485: git security update (IMPORTANT)
ELSA-2017-2484
ELSA-2017-2484: git security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-1000117 A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability. | CVSS3: 8.8 | 71% Высокий | около 8 лет назад |
 | CVE-2017-1000117 A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability. | CVSS3: 6.3 | 71% Высокий | больше 8 лет назад |
 | CVE-2017-1000117 A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability. | CVSS3: 8.8 | 71% Высокий | около 8 лет назад |
| CVE-2017-1000117 A malicious third-party can give a crafted "ssh://..." URL to an unsus ... | CVSS3: 8.8 | 71% Высокий | около 8 лет назад |
 | openSUSE-SU-2017:2331-1 Security update for git | 71% Высокий | около 8 лет назад | |
| openSUSE-SU-2017:2182-1 Security update for git | 71% Высокий | около 8 лет назад | |
| SUSE-SU-2017:2320-1 Security update for git | 71% Высокий | около 8 лет назад | |
| SUSE-SU-2017:2225-1 Security update for git | 71% Высокий | около 8 лет назад | |
| GHSA-q5x8-47cx-6m4p A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability. | CVSS3: 8.8 | 71% Высокий | больше 3 лет назад |
| ELSA-2017-2485 ELSA-2017-2485: git security update (IMPORTANT) | около 8 лет назад | ||
| ELSA-2017-2484 ELSA-2017-2484: git security update (IMPORTANT) | около 8 лет назад |
Уязвимостей на страницу