CVE-2014-9938

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1...

8.8 HighFix available

CVE-2014-9938 is a high vulnerability (CVSS 8.8) in Git-scm Git, published March 19, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.32%, the 83rd percentile. Fixed in git 1:2.0.0~rc2-1.

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

2.32%Down 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 8.8

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.

Record: CVE-2014-9938
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-116
Updated: 2026-11-02

CVE List No score

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.

Record: CVE-2014-9938
Updated: 2026-11-02

EUVDEUVD-2014-9743 No score

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.

Record: EUVD-2014-9743
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6vhm-rfmv-gf4j 8.8

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1...

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.

Record: GHSA-6vhm-rfmv-gf4j
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-116
Updated: 2026-11-02

OSV 8.8

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.

Record: CVE-2014-9938
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-9938 8.8

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.

Record: DEBIAN-CVE-2014-9938
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2017:2004 7.8

Red Hat Security Advisory: git security and bug fix update

Record: RHSA-2017:2004
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-9938 8.8

contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.

Record: UBUNTU-CVE-2014-9938
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUSN-3243-1 No score

git vulnerability

It was discovered that Git incorrectly sanitized branch names in the PS1 variable when configured to display the repository status in the shell prompt. If a user were tricked into exploring a malicious repository, a remote attacker could use this issue to execute arbitrary code.

Record: USN-3243-1
Updated: 2026-11-02

Affected products

git-scm git

Affected packages

Affected packages
Package	Affected	Fixed
`git` Debian:12	before 1:2.0.0~rc2-1	1:2.0.0~rc2-1
`git` Debian:13	before 1:2.0.0~rc2-1	1:2.0.0~rc2-1
`git` Debian:14	before 1:2.0.0~rc2-1	1:2.0.0~rc2-1
`emacs-git` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`emacs-git-el` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-all` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-bzr` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-cvs` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-daemon` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7

Show 62 moreShow less

Affected packages
Package	Affected	Fixed
`git-debuginfo` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-email` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-gui` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-hg` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-p4` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-svn` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`gitk` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`gitweb` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`perl-Git` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`perl-Git-SVN` Red Hat:enterprise_linux:7::client	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`emacs-git` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`emacs-git-el` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-all` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-bzr` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-cvs` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-daemon` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-debuginfo` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-email` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-gui` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-hg` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-p4` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-svn` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`gitk` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`gitweb` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`perl-Git` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`perl-Git-SVN` Red Hat:enterprise_linux:7::computenode	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`emacs-git` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`emacs-git-el` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-all` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-bzr` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-cvs` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-daemon` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-debuginfo` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-email` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-gui` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-hg` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-p4` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-svn` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`gitk` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`gitweb` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`perl-Git-SVN` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`perl-Git` Red Hat:enterprise_linux:7::server	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`emacs-git` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`emacs-git-el` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-all` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-bzr` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-cvs` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-daemon` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-debuginfo` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-email` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-gui` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-hg` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-p4` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git-svn` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`gitk` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`gitweb` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`perl-Git-SVN` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`perl-Git` Red Hat:enterprise_linux:7::workstation	before 0:1.8.3.1-11.el7	0:1.8.3.1-11.el7
`git` Ubuntu:14.04:LTS	before 1:1.9.1-1ubuntu0.4, plus listed versions 1:1.8.3.2-11:1.8.4.2-11:1.8.4.3-11:1.8.4.4-11:1.8.5-1 Show 10 moreShow less 1:1.8.5.1-11:1.8.5.2-11:1.8.5.2-21:1.8.5.3-11:1.9~rc1-11:1.9.0-11:1.9.1-11:1.9.1-1ubuntu0.11:1.9.1-1ubuntu0.21:1.9.1-1ubuntu0.3	1:1.9.1-1ubuntu0.4

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 13 moreShow less