PT-2015-3069 · Git+1 · Git+1

Published 2015-12-11 · Updated 2016-12-07 · CVE-2015-7082

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.5.4 Apple Xcode versions prior to 7.2

Description The issue concerns multiple unspecified vulnerabilities in Git, which is used in Apple Xcode. These vulnerabilities are related to errors in the code and can potentially allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information.

Recommendations For Git versions prior to 2.5.4, update to version 2.5.4 or later. For Apple Xcode versions prior to 7.2, update to version 7.2 or later.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00274

CVE-2015-7082

Affected Products

Git

Xcode

References · 6

• https://github.com/git/git/blob/master/Documentation/RelNotes/2.5.4.txt · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Dec/msg00004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7082 · Security Note
• https://support.apple.com/HT205642 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00274 · Security Note
• http://securitytracker.com/id/1034340 · Note