CVE-2018-1000021

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

References

http://www.batterystapl.es/2018/01/security-implications-of-ansi-escape.html

Affected packages

Git / github.com/git-for-windows/git

Affected ranges

Type

GIT

Repo

https://github.com/git-for-windows/git

Events

Introduced

Last affected

9b185bef0c15cec1ea8753ce091e42ea041f2c31

Database specific

Show details

{
    "cpe": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.15.1"
        }
    ]
}

Affected versions

v0.*

v0.99

v0.99.1

v0.99.2

v0.99.3

v0.99.4

v0.99.5

v0.99.6

v0.99.7

v0.99.8

v0.99.8a

v0.99.8b

v0.99.8c

v0.99.8d

v0.99.8e

v0.99.8f

v0.99.8g

v0.99.9a

v0.99.9b

v0.99.9c

v0.99.9d

v0.99.9e

v0.99.9f

v0.99.9g

v0.99.9h

v0.99.9i

v0.99.9j

v0.99.9k

v0.99.9l

v0.99.9m

v0.99.9n

v1.*

v1.0.0

v1.0rc1

v1.0rc2

v1.0rc3

v1.0rc4

v1.0rc5

v1.0rc6

v1.1.0

v1.2.0

v1.3.0-rc1

v1.4.1

v1.4.1-rc1

v1.4.1-rc2

v1.4.2

v1.4.2-rc1

v1.4.2-rc2

v1.4.2-rc3

v1.4.2-rc4

v1.4.3

v1.4.3-rc1

v1.4.3-rc2

v1.4.3-rc3

v1.4.4

v1.4.4-rc1

v1.4.4-rc2

v1.4.4.1

v1.5.0

v1.5.0-rc0

v1.5.0-rc1

v1.5.0-rc2

v1.5.0-rc3

v1.5.0-rc4

v1.5.1

v1.5.1-rc1

v1.5.1-rc2

v1.5.1-rc3

v1.5.2

v1.5.2-rc0

v1.5.2-rc1

v1.5.2-rc2

v1.5.2-rc3

v1.5.3

v1.5.3-rc0

v1.5.3-rc1

v1.5.3-rc2

v1.5.3-rc3

v1.5.3-rc4

v1.5.3-rc5

v1.5.3-rc6

v1.5.3-rc7

v1.5.3.1

v1.5.4

v1.5.4-rc0

v1.5.4-rc1

v1.5.4-rc2

v1.5.4-rc3

v1.5.4-rc4

v1.5.4-rc5

v1.5.5

v1.5.5-rc0

v1.5.5-rc1

v1.5.5-rc2

v1.5.5-rc3

v1.5.6

v1.5.6-rc0

v1.5.6-rc1

v1.5.6-rc2

v1.5.6-rc3

v1.6.0

v1.6.0-rc0

v1.6.0-rc1

v1.6.0-rc2

v1.6.0-rc3

v1.6.1

v1.6.1-rc1

v1.6.1-rc2

v1.6.1-rc3

v1.6.1-rc4

v1.6.2

v1.6.2-rc0

v1.6.2-rc1

v1.6.2-rc2

v1.6.3

v1.6.3-rc0

v1.6.3-rc1

v1.6.3-rc2

v1.6.3-rc3

v1.6.3-rc4

v1.6.4

v1.6.4-rc0

v1.6.4-rc1

v1.6.4-rc2

v1.6.4-rc3

v1.6.5

v1.6.5-rc0

v1.6.5-rc1

v1.6.5-rc2

v1.6.5-rc3

v1.6.6

v1.6.6-rc0

v1.6.6-rc1

v1.6.6-rc2

v1.6.6-rc3

v1.6.6-rc4

v1.7.0

v1.7.0-rc0

v1.7.0-rc1

v1.7.0-rc2

v1.7.1

v1.7.1-rc0

v1.7.1-rc1

v1.7.1-rc2

v1.7.10

v1.7.10-rc0

v1.7.10-rc1

v1.7.10-rc2

v1.7.10-rc3

v1.7.10-rc4

v1.7.11

v1.7.11-rc0

v1.7.11-rc1

v1.7.11-rc2

v1.7.11-rc3

v1.7.12

v1.7.12-rc0

v1.7.12-rc1

v1.7.12-rc2

v1.7.12-rc3

v1.7.2

v1.7.2-rc0

v1.7.2-rc1

v1.7.2-rc2

v1.7.2-rc3

v1.7.3

v1.7.3-rc0

v1.7.3-rc1

v1.7.3-rc2

v1.7.3.1

v1.7.4

v1.7.4-rc0

v1.7.4-rc1

v1.7.4-rc2

v1.7.4-rc3

v1.7.5

v1.7.5-rc0

v1.7.5-rc1

v1.7.5-rc2

v1.7.5-rc3

v1.7.6

v1.7.6-rc0

v1.7.6-rc1

v1.7.6-rc2

v1.7.6-rc3

v1.7.7

v1.7.7-rc0

v1.7.7-rc1

v1.7.7-rc2

v1.7.7-rc3

v1.7.8

v1.7.8-rc0

v1.7.8-rc1

v1.7.8-rc2

v1.7.8-rc3

v1.7.8-rc4

v1.7.9

v1.7.9-rc0

v1.7.9-rc1

v1.7.9-rc2

v1.8.0

v1.8.0-rc0

v1.8.0-rc1

v1.8.0-rc2

v1.8.0-rc3

v1.8.1

v1.8.1-rc0

v1.8.1-rc1

v1.8.1-rc2

v1.8.1-rc3

v1.8.2

v1.8.2-rc0

v1.8.2-rc1

v1.8.2-rc2

v1.8.2-rc3

v1.8.3

v1.8.3-rc0

v1.8.3-rc1

v1.8.3-rc2

v1.8.3-rc3

v1.8.4

v1.8.4-rc0

v1.8.4-rc1

v1.8.4-rc2

v1.8.4-rc3

v1.8.4-rc4

v1.8.5

v1.8.5-rc0

v1.8.5-rc1

v1.8.5-rc2

v1.8.5-rc3

v1.9-rc0

v1.9-rc1

v1.9-rc2

v1.9.0

v1.9.0-rc3

v2.*

v2.0.0

v2.0.0-rc0

v2.0.0-rc1

v2.0.0-rc2

v2.0.0-rc3

v2.0.0-rc4

v2.1.0

v2.1.0-rc0

v2.1.0-rc1

v2.1.0-rc2

v2.10.0

v2.10.0-rc0

v2.10.0-rc1

v2.10.0-rc2

v2.11.0

v2.11.0-rc0

v2.11.0-rc1

v2.11.0-rc2

v2.11.0-rc3

v2.12.0

v2.12.0-rc0

v2.12.0-rc1

v2.12.0-rc2

v2.13.0

v2.13.0-rc0

v2.13.0-rc1

v2.13.0-rc2

v2.14.0

v2.14.0-rc0

v2.14.0-rc1

v2.15.0

v2.15.0-rc0

v2.15.0-rc1

v2.15.0-rc2

v2.15.1

v2.2.0

v2.2.0-rc0

v2.2.0-rc1

v2.2.0-rc2

v2.2.0-rc3

v2.3.0

v2.3.0-rc0

v2.3.0-rc1

v2.3.0-rc2

v2.4.0

v2.4.0-rc0

v2.4.0-rc1

v2.4.0-rc2

v2.4.0-rc3

v2.5.0

v2.5.0-rc0

v2.5.0-rc1

v2.5.0-rc2

v2.5.0-rc3

v2.6.0

v2.6.0-rc0

v2.6.0-rc1

v2.6.0-rc2

v2.6.0-rc3

v2.7.0

v2.7.0-rc0

v2.7.0-rc1

v2.7.0-rc2

v2.7.0-rc3

v2.8.0

v2.8.0-rc0

v2.8.0-rc1

v2.8.0-rc2

v2.8.0-rc3

v2.8.0-rc4

v2.9.0

v2.9.0-rc0

v2.9.0-rc1

v2.9.0-rc2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1000021.json"

Git / github.com/git/git