Lucene search
Veracode Vulnerability DatabaseVERACODE:38945HistoryJan 20, 2023 - 8:06 p.m.
Remote Code Execution(RCE)
2023-01-2020:06:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
32
git
remote code execution
vulnerable
gitattributes
0.013 Low
EPSS
Percentile
85.8%
git is vulnerable to Remote Code Execution(RCE). When parsing gitattributes, multiple integer overflows may occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge, causing overflows to be triggered via a crafted gitattributes file.
Related
cbl_mariner
cbl_mariner
CVE-2022-23521 affecting package git 2.23.4-2
2023-02-14 02:36:00
CVE-2022-23521 affecting package git for versions less than 2.33.8-2
2023-09-27 18:02:50
nvd
nvd
CVE-2022-23521
2023-01-17 23:15:15
alpinelinux
alpinelinux
CVE-2022-23521
2023-01-17 23:15:15
ubuntucve
ubuntucve
CVE-2022-23521
2023-01-17 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in Git [CVE-2022-23521]
2023-04-06 19:24:25
Security Bulletin: IBM Cloud Pak for Network Automation 2.4.5 addresses multiple security vulnerabilities
2023-04-17 13:48:36
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-03-30 15:19:31
cgr
cgr
CVE-2022-23521 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2022-23521 gitattributes parsing integer overflow in git
2023-01-17 22:17:17
redhatcve
redhatcve
CVE-2022-23521
2023-01-18 17:05:12
mscve
mscve
GitHub: CVE-2022-23521 gitattributes parsing integer overflow
2023-02-14 08:00:00
osv
osv
CVE-2022-23521
2023-01-17 23:15:15
Important: git security update
2023-02-06 19:26:44
Important: git security update
2023-02-06 19:25:41
freebsd
freebsd
git -- gitattributes parsing integer overflow
2023-01-17 00:00:00
cve
cve
CVE-2022-23521
2023-01-17 23:15:15
nessus
nessus
prion
prion
Integer overflow
2023-01-17 23:15:00
debiancve
debiancve
CVE-2022-23521
2023-01-17 23:15:15
wolfi
wolfi
CVE-2022-23521 vulnerabilities
2024-06-26 15:33:03
amazon
amazon
Important: git
2023-01-31 20:44:00
Important: git
2023-01-30 16:02:00
oraclelinux
oraclelinux
git security update
2023-02-07 00:00:00
git security update
2023-02-28 00:00:00
git security update
2023-02-07 00:00:00
almalinux
almalinux
Important: git security update
2023-02-06 00:00:00
Important: git security update
2023-02-06 00:00:00
redhat
redhat
(RHSA-2023:0628) Important: git security update
2023-02-07 15:33:16
(RHSA-2023:0599) Important: git security update
2023-02-06 16:26:37
(RHSA-2023:0609) Important: git security update
2023-02-06 19:24:22
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0033)
2023-03-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0108-1)
2023-01-23 00:00:00
Fedora: Security Advisory for git (FEDORA-2023-9718cc6113)
2023-01-22 00:00:00
ubuntu
ubuntu
Git vulnerabilities
2023-02-07 00:00:00
Git regression
2023-01-19 00:00:00
Git vulnerabilities
2023-03-01 00:00:00
hivepro
hivepro
altlinux
altlinux
Security fix for the ALT Linux 10 package git version 2.33.6-alt1
2023-01-20 00:00:00
cloudfoundry
cloudfoundry
USN-5810-1: Git vulnerabilities | Cloud Foundry
2023-02-23 00:00:00
USN-5810-2: Git regression | Cloud Foundry
2023-02-24 00:00:00
rocky
rocky
git security update
2023-02-06 19:26:44
git security update
2023-02-06 19:25:41
fedora
fedora
[SECURITY] Fedora 37 Update: git-2.39.1-1.fc37
2023-01-21 03:35:26
[SECURITY] Fedora 36 Update: git-2.39.1-1.fc36
2023-01-21 03:44:31
centos
centos
emacs, git, gitk, gitweb, perl security update
2023-03-01 14:01:43
redos
redos
ROS-20230418-03
2023-04-18 00:00:00
debian
debian
[SECURITY] [DLA 3282-1] git security update
2023-01-26 13:00:35
[SECURITY] [DSA 5332-1] git security update
2023-01-29 16:59:53
mageia
mageia
Updated git packages fix security vulnerability
2023-02-07 03:06:39
rosalinux
rosalinux
Advisory ROSA-SA-2023-2130
2023-03-07 12:33:13
Advisory ROSA-SA-2024-2398
2024-04-11 08:08:00
thn
thn
Git Users Urged to Update Software to Prevent Remote Code Execution Attacks
2023-01-18 09:28:00
slackware
slackware
[slackware-security] git
2023-01-18 06:22:27
kaspersky
kaspersky
KLA20182 Multiple vulnerabilities in Git for Windows
2023-01-17 00:00:00
KLA20235 Multiple vulnerabilities in Microsoft Developer Tools
2023-02-14 00:00:00
github
github
Git security vulnerabilities announced
2023-01-17 18:31:50
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0327
2023-02-06 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0526
2023-02-03 00:00:00
malwarebytes
malwarebytes
Update now! Two critical flaws in Git's code found, patched
2023-01-19 04:00:00
gentoo
gentoo
Git: Multiple Vulnerabilities
2023-12-27 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00