PT-2025-28866 · Debian+9 · Debian+10

J6T · Publicado 2025-01-01 · Atualizado 2025-10-09 · CVE-2025-46835

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions: git in Debian Linux (affected versions not specified)

Description: A flaw exists in Git GUI that allows for the creation and overwriting of arbitrary writable files. This occurs when a user clones an untrusted repository and is subsequently deceived into modifying a file within a maliciously named directory inside the repository.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Argument Injection

Enumeração de Fraquezas

CWE-88

Identificadores relacionados

ALSA-2025:11462

ALSA-2025:11533

ALSA-2025:11534

ALT-PU-2025-10893

ALT-PU-2025-9420

ALT-PU-2025-9640

BDU:2025-09361

CESA-2025_11534

CVE-2025-46835

DLA-4323-1

ECHO-9190-FA06-2D45

GHSA-XFX7-68V4-V8FG

INFSA-2025_11462

INFSA-2025_11534

OESA-2025-1844

OESA-2025-1845

OESA-2025-1846

OESA-2025-1847

OESA-2025-1848

OESA-2025-1849

OPENSUSE-SU-2025:15337-1

RHSA-2025:11462

RHSA-2025:11533

RHSA-2025:11534

RHSA-2025_11462

RHSA-2025_11534

SUSE-SU-2025:03012-1

SUSE-SU-2025:03022-1

SUSE-SU-2025:03037-1

SUSE-SU-2025:20721-1

SUSE-SU-2025:20855-1

SUSE-SU-2025_03012-1

SUSE-SU-2025_03022-1

SUSE-SU-2025_03037-1

USN-7626-1

USN-7626-2

USN-7626-3

Produtos afetados

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Git

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Referências · 130

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46835.json · Exploit
• https://github.com/j6t/git-gui/compare/dcda716dbc9c90bcac4611bd1076747671ee0906..a437f5bc93330a70b42a230e52f3bd036ca1b1da · Nota
• https://github.com/j6t/git-gui/security/advisories/GHSA-xfx7-68v4-v8fg · Nota
• https://suse.com/security/cve/CVE-2025-48386 · Nota
• https://errata.almalinux.org/9/ALSA-2025-11462.html · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2025-1844 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2025:11534 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2025:15337-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2025-46835 · Aviso do Fabricante
• https://openwall.com/lists/oss-security/2025/07/08/4 · Nota
• https://suse.com/support/update/announcement/2025/suse-su-202503037-1 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46835 · Nota
• https://access.redhat.com/security/cve/CVE-2024-50349 · Nota
• https://ubuntu.com/security/notices/USN-7626-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1212476 · Nota