Most recent entries from all

bdu:2018-01486

Withdrawn: BELL-CVE-2018-11235 — CVE-2018-11235 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2018-avi-263 — De multiples vulnérabilités ont été découvertes dans Git . Elles permettent à un attaquant de provoquer une exécution d…

certfr-2018-avi-263

CLEANSTART-2025-DA54613 — In Git before 2

Affected: CleanStart: git

Security vulnerability affects the git package. In Git before 2.

cnvd-2018-10794

EUVD-2026-65114

fkie_cve-2018-11235

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.

GHSA-v6w3-vcjx-mwhx

gsd-2018-11235

openSUSE-SU-2020:0598-1 — Security update for git

Security update for git

RHSA-2018:2147 — Red Hat Security Advisory: rh-git29-git security update

git: path sanity check in is_ntfs_dotgit() can read arbitrary memory git: arbitrary code execution when recursively cloning a malicious repository

SUSE-SU-2018:1566-1 — Security update for git

Security update for git

UBUNTU-CVE-2018-11235

Affected: Ubuntu:14.04:LTS: git, Ubuntu:16.04:LTS: git, Ubuntu:18.04:LTS: git

VDE-2023-016 — Phoenix Contact: PLCnext Engineer Vulnerabilities in LibGit2Sharp/LibGit2

Several vulnerabilities have been discovered in the LibGit2Sharp or underlying LibGit2 library.This open-source component is widely used in a lot of products worldwide.The product is vulnerable to remote code execution, privilege escalation and tampering.PLCnext Engineer is using the LibGit2Sharp library to provide version control capabilities.