CVE-2018-11235 — Path Traversal in Redhat Enterprise Linux Server

CWE-22 — Path TraversalCWE-20 — Improper Input Validation14 documents9 sources
Severity
7.8HIGHNVD
OSV7.5
EPSS
41.7%
top 2.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
GITGit-scm GITGitforwindows GIT+7 more
Timeline
PublishedMay 30
Latest updateMay 13

Description

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypas…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages7 packages

▶Debiangit/git< 1:2.17.1-1+3
▶Ubuntugit/git< 1:1.9.1-1ubuntu0.8+2
▶NVDgit-scm/git2.14.0 — 2.14.3+4
▶NVDgitforwindows/git2.17.1

Also affects: Debian Linux 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 17.10, 18.04, Enterprise Linux 7.0, 7.5

Patches

Patch: blogs.msdn.microsoft.com ↗Patch: blogs.msdn.microsoft.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-v6w3-vcjx-mwhx: In Git before 2↗2022-05-13
▶
OSV
git vulnerabilities↗2018-06-05
▶
OSV
CVE-2018-11235: In Git before 2↗2018-05-30
▶
CVEList
CVE-2018-11235: In Git before 2↗2018-05-30
▶

📋Vendor Advisories

4
Apple
CVE-2018-11235: Xcode 9.4.1↗2018-06-13
▶
Ubuntu
Git vulnerabilities↗2018-06-05
▶
Red Hat
git: arbitrary code execution when recursively cloning a malicious repository↗2018-05-30
▶
Debian
CVE-2018-11235: git - In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before ...↗2018
▶

💬Community

5
Bugzilla
libgit2: arbitrary code execution when recursively cloning a malicious repository (git CVE-2018-11235 variant) [fedora-all]↗2018-06-29
▶
Bugzilla
libgit2: arbitrary file write when recursively cloning a malicious repository (git CVE-2018-11235 variant)↗2018-06-29
▶
Bugzilla
CVE-2018-11235 libgit2: git: arbitrary code execution when recursively cloning a malicious repository [fedora-all]↗2018-06-27
▶
Bugzilla
CVE-2018-11235 git: arbitrary code execution when recursively cloning a malicious repository [fedora-all]↗2018-05-30
▶
Bugzilla
CVE-2018-11235 git: arbitrary code execution when recursively cloning a malicious repository↗2018-05-29
▶
CVE-2018-11235 — Path Traversal in Redhat | cvebase