PT-2015-3069 · Git+1 · Git+1

Publicado 2015-12-11 · Atualizado 2016-12-07 · CVE-2015-7082

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.5.4 Apple Xcode versions prior to 7.2

Description The issue concerns multiple unspecified vulnerabilities in Git, which is used in Apple Xcode. These vulnerabilities are related to errors in the code and can potentially allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information.

Recommendations For Git versions prior to 2.5.4, update to version 2.5.4 or later. For Apple Xcode versions prior to 7.2, update to version 7.2 or later.

Correção

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

BDU:2016-00274

CVE-2015-7082

Produtos afetados

Git

Xcode

Referências · 6

• https://github.com/git/git/blob/master/Documentation/RelNotes/2.5.4.txt · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Dec/msg00004.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7082 · Nota de Segurança
• https://support.apple.com/HT205642 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2016-00274 · Nota de Segurança
• http://securitytracker.com/id/1034340 · Nota