← voltar
CVE-2018-17456

CVE-2018-17456

60Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 97%
da publicação à arma0 dias
Publicada no NVD6 de out.
1ª PoC5 de out.
metasploit5 de out.
probabilidade de exploração
97%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
11 exploit(s) público(s)
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.
Produtos afetados
n/a · n/a
PoCs públicas encontradas — 11
exploitdbwww.exploit-db.com/exploits/45548não verificadoexploitdbwww.exploit-db.com/exploits/45631não verificadogithubgithub.com/AnonymKing/CVE-2018-17456★ 5githubgithub.com/799600966/CVE-2018-17456★ 0githubgithub.com/shpik-kr/CVE-2018-17456★ 0githubgithub.com/matlink/CVE-2018-17456★ 0githubgithub.com/jiahuiLeee/test★ 0githubgithub.com/KKkai0315/CVE-2018-17456★ 0cve_referencewww.exploit-db.com/exploits/45548/não verificadocve_referencepacketstormsecurity.com/files/152173/Sourcetree-Git-Arbitrary-Code-Execution-URL-Handling.htmlnão verificadocve_referencewww.exploit-db.com/exploits/45631/não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.htmlhttp://packetstormsecurity.com/files/152173/Sourcetree-Git-Arbitrary-Code-Execution-URL-Handling.htmlhttps://access.redhat.com/errata/RHSA-2018:3408https://access.redhat.com/errata/RHSA-2018:3505https://access.redhat.com/errata/RHSA-2018:3541https://access.redhat.com/errata/RHSA-2020:0316https://github.com/git/git/commit/1a7fd1fb2998002da6e9ff2ee46e1bdd25ee8404https://github.com/git/git/commit/a124133e1e6ab5c7a9fef6d0e6bcb084e3455b46https://marc.info/?l=git&m=153875888916397&w=2https://seclists.org/bugtraq/2019/Mar/30https://usn.ubuntu.com/3791-1/https://www.debian.org/security/2018/dsa-4311