PT-2018-9212 · Git+2 · Git+2

CVE-2018-1000021 · Publicado 2018-02-09 · Atualizado 2024-10-24

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: git versions 2.15.1 and earlier

Description: The issue is related to an Input Validation Error in the Client component, which can lead to problems including messing up terminal configuration and potentially allowing Remote Code Execution (RCE). This can be exploited when a user interacts with a malicious git server or if their traffic is modified in a Man-In-The-Middle (MITM) attack.

Recommendations: For git versions 2.15.1 and earlier, update to a version later than 2.15.1 to resolve the issue. As a temporary workaround, consider restricting interactions with untrusted git servers and securing network traffic to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-2090

CVE-2018-1000021

ECHO-776A-C85C-3DA5

Produtos afetados

Alt Linux

Debian

Git

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2018-1000021 · Nota de Segurança
• http://batterystapl.es/2018/01/security-implications-of-ansi-escape.html · Nota
• https://public-inbox.org/git/[e-mail] · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000021 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-1000021 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-1000021 · Aviso do Fabricante
• https://t.me/cvenotify/99402 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2018-1000021 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1000021 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000021 · Aviso do Fabricante