Lucene search

K

Veracode Vulnerability DatabaseVERACODE:40500

HistoryMay 13, 2023 - 2:50 p.m.

Path Traversal

2023-05-1314:50:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

16

git

vulnerability

path traversal

software

overwrite

0.002 Low

EPSS

Percentile

60.2%

git is vulnerable to Path Traversal. The vulnerability allows a path outside the working tree to be overwritten with partially controlled contents by feeding a crafted input into ‘git apply --reject’.

CPENameOperatorVersion
git:3.15eq2.34.0-r0
git:3.15eq2.34.7-r0
git:3.15eq2.34.5-r0
git:3.15eq2.34.4-r0
git:3.15eq2.34.6-r0
git:3.15eq2.34.1-r0
git:3.15eq2.34.2-r0
git:3.15eq2.33.1-r0
git:3.17eq2.38.1-r0
git:3.17eq2.38.4-r0

Rows per page:

1-10 of 1341

References

www.openwall.com/lists/oss-security/2023/04/25/2

github.com/git/git/commit/18e2b1cfc80990719275d7b08e6e50f3e8cbc902

github.com/git/git/commit/668f2d53613ac8fd373926ebe219f2c29112d93e

github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx

lists.fedoraproject.org/archives/list/[email protected]/message/BSXOGVVBJLYX26IAYX6PJSYQB36BREWH/

lists.fedoraproject.org/archives/list/[email protected]/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/

lists.fedoraproject.org/archives/list/[email protected]/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/

lists.fedoraproject.org/archives/list/[email protected]/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/

secdb.alpinelinux.org/edge/main.yaml

secdb.alpinelinux.org/v3.14/main.yaml

secdb.alpinelinux.org/v3.15/main.yaml

secdb.alpinelinux.org/v3.16/main.yaml

secdb.alpinelinux.org/v3.17/main.yaml

secdb.alpinelinux.org/v3.18/main.yaml

security.gentoo.org/glsa/202312-15

0.002 Low

EPSS

Percentile

60.2%