CVE-2018-17456
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 97%
from disclosure to weapon0 days
Published on NVDOct 6
1st PoCOct 5
metasploitOct 5
exploitation probability
97%top 1% of all CVEs
observed exploitation
nono source reports it
11 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Affected
3 products
Red Hat Fuse 7 · Red Hat JBoss Fuse 6 · Red Hat JBoss Fuse Integration Service 2
none_available: Affected
Fixed
22 products (448 components)
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) · Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) · Red Hat Enterprise Linux Server Optional (v. 7) · Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) · Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) · and others 17
Not affected
3 products (34 components) — because the vulnerable code is not present in the product
Red Hat Software Collections · Red Hat Enterprise Linux 8 · Red Hat Mobile Application Platform 4
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.
Affected products
n/a · n/apublic PoCs found — 11
exploitdbwww.exploit-db.com/exploits/45548unverifiedexploitdbwww.exploit-db.com/exploits/45631unverifiedgithubgithub.com/AnonymKing/CVE-2018-17456★ 5githubgithub.com/jiahuiLeee/test★ 0githubgithub.com/KKkai0315/CVE-2018-17456★ 0githubgithub.com/matlink/CVE-2018-17456★ 0githubgithub.com/799600966/CVE-2018-17456★ 0githubgithub.com/shpik-kr/CVE-2018-17456★ 0cve_referencewww.exploit-db.com/exploits/45548/unverifiedcve_referencepacketstormsecurity.com/files/152173/Sourcetree-Git-Arbitrary-Code-Execution-URL-Handling.htmlunverifiedcve_referencewww.exploit-db.com/exploits/45631/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.htmlhttp://packetstormsecurity.com/files/152173/Sourcetree-Git-Arbitrary-Code-Execution-URL-Handling.htmlhttps://access.redhat.com/errata/RHSA-2018:3408https://access.redhat.com/errata/RHSA-2018:3505https://access.redhat.com/errata/RHSA-2018:3541https://access.redhat.com/errata/RHSA-2020:0316https://github.com/git/git/commit/1a7fd1fb2998002da6e9ff2ee46e1bdd25ee8404https://github.com/git/git/commit/a124133e1e6ab5c7a9fef6d0e6bcb084e3455b46https://marc.info/?l=git&m=153875888916397&w=2https://seclists.org/bugtraq/2019/Mar/30https://usn.ubuntu.com/3791-1/https://www.debian.org/security/2018/dsa-4311