Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "git", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-all", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-arch", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-bzr", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-core", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-cvs", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-daemon-run", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-daemon-sysvinit", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-doc", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-el", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-email", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-gui", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-man", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-mediawiki", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "git-svn", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "gitk", "binary_version": "1:1.9.1-1ubuntu0.7" }, { "binary_name": "gitweb", "binary_version": "1:1.9.1-1ubuntu0.7" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "git", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-all", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-arch", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-core", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-cvs", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-daemon-run", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-daemon-sysvinit", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-doc", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-el", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-email", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-gui", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-man", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-mediawiki", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "git-svn", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "gitk", "binary_version": "1:2.7.4-0ubuntu1.3" }, { "binary_name": "gitweb", "binary_version": "1:2.7.4-0ubuntu1.3" } ] }