CVE-2018-11235

CVE-2018-11235

Published · Updated

Follow this CVE+ Monitor git+ Monitor git

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 47%
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
7 products
JBoss Developer Studio 11 · Red Hat OpenShift Container Platform 3.2 · Red Hat OpenShift Container Platform 3.3 · Red Hat OpenShift Container Platform 3.4 · Red Hat OpenShift Container Platform 3.5 · and others 2
workaround: Don't create OCP source-to-image applications from source code repositories hosted by untrusted parties. Github is blocking users from pushing repositories with malicious submodules so it's less likely you can pull a malicious repository from…
Fixed
16 products (252 components)
Red Hat Enterprise Linux Server Optional (v. 7) · Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) · Red Hat Enterprise Linux Client Optional (v. 7) · Red Hat Enterprise Linux ComputeNode Optional (v. 7) · Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) · and others 11
fix ↗
Not affected
16 products (62 components) — because the vulnerable code is not present in the product
Red Hat OpenShift Enterprise 3 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux Atomic Host 7 · Red Hat Fuse 7 · and others 11
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.
Affected products
n/a · n/a