Every CVE Search/ Get API key

CVE-2018-1000021

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can...

5.0 Medium

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

1.07%Up 0.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.0

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

Record
CVE-2018-1000021
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

Record
CVE-2018-1000021
Updated
2026-11-02
EUVDEUVD-2018-1784 No score

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

Record
EUVD-2018-1784
Updated
2026-11-03
GitHub AdvisoriesGHSA-vpq8-fvqp-vj6h 8.8

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can...

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

Record
GHSA-vpq8-fvqp-vj6h
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
OSV 5.0

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

Record
CVE-2018-1000021
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2018-1000021 5.0

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

Record
DEBIAN-CVE-2018-1000021
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2018-1000021 5.0

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

Record
UBUNTU-CVE-2018-1000021
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
git
Debian:12
 All versions, plus listed versions
1:2.39.2+next.20230215-11:2.39.2-1.11:2.39.5-0+deb12u11:2.39.5-0+deb12u21:2.39.5-0+deb12u3
Show 41 moreShow less
1:2.40.0+next.20230313-11:2.40.0+next.20230319-11:2.40.0-11:2.40.0-1+alpha.11:2.40.1+next.20230424-11:2.40.1+next.20230427-11:2.40.1-11:2.40.1-1+alpha.11:2.42.0-11:2.43.0+next.20231120-11:2.43.0+next.20240104-11:2.43.0-11:2.43.0-1+alpha.21:2.45.1+next.20240516-11:2.45.1-11:2.45.2+next.20240614-11:2.45.2-11:2.45.2-1+alpha.11:2.45.2-1.11:2.45.2-1.1+alpha.11:2.45.2-1.21:2.45.2-1.31:2.47.1-11:2.47.2-0.11:2.47.2-0.21:2.48.0~rc1+next.20250101-11:2.49.0+next.20250314-11:2.49.0-11:2.49.0-21:2.49.0-31:2.50.0+next.20250615-11:2.50.0-11:2.50.0~rc0+next.20250528-11:2.50.1-0.11:2.51.0+next.20250825-11:2.51.0-11:2.53.0+next.20260227-11:2.53.0-11:2.53.0-1+hurd.11:2.55.0+next.20260731-11:2.55.0-1
 None known
git
Debian:13
 All versions, plus listed versions
1:2.47.2-0.21:2.47.3-0+deb13u11:2.48.0~rc1+next.20250101-11:2.49.0+next.20250314-11:2.49.0-1
Show 13 moreShow less
1:2.49.0-21:2.49.0-31:2.50.0+next.20250615-11:2.50.0-11:2.50.0~rc0+next.20250528-11:2.50.1-0.11:2.51.0+next.20250825-11:2.51.0-11:2.53.0+next.20260227-11:2.53.0-11:2.53.0-1+hurd.11:2.55.0+next.20260731-11:2.55.0-1
 None known
git
Debian:14
 All versions, plus listed versions
1:2.47.2-0.21:2.48.0~rc1+next.20250101-11:2.49.0+next.20250314-11:2.49.0-11:2.49.0-2
Show 12 moreShow less
1:2.49.0-31:2.50.0+next.20250615-11:2.50.0-11:2.50.0~rc0+next.20250528-11:2.50.1-0.11:2.51.0+next.20250825-11:2.51.0-11:2.53.0+next.20260227-11:2.53.0-11:2.53.0-1+hurd.11:2.55.0+next.20260731-11:2.55.0-1
 None known
git
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1:2.5.0-11:2.6.2-11:2.6.3-11:2.6.4-11:2.7.0~rc3-1
Show 24 moreShow less
1:2.7.0-11:2.7.3-0ubuntu11:2.7.4-0ubuntu11:2.7.4-0ubuntu1.11:2.7.4-0ubuntu1.21:2.7.4-0ubuntu1.31:2.7.4-0ubuntu1.41:2.7.4-0ubuntu1.51:2.7.4-0ubuntu1.61:2.7.4-0ubuntu1.71:2.7.4-0ubuntu1.81:2.7.4-0ubuntu1.91:2.7.4-0ubuntu1.101:2.7.4-0ubuntu1.10+esm11:2.7.4-0ubuntu1.10+esm31:2.7.4-0ubuntu1.10+esm41:2.7.4-0ubuntu1.10+esm51:2.7.4-0ubuntu1.10+esm61:2.7.4-0ubuntu1.10+esm71:2.7.4-0ubuntu1.10+esm81:2.7.4-0ubuntu1.10+esm91:2.7.4-0ubuntu1.10+esm101:2.7.4-0ubuntu1.10+esm111:2.7.4-0ubuntu1.10+esm13
 None known
git
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1:2.14.1-1ubuntu41:2.15.1-1ubuntu21:2.17.0-1ubuntu11:2.17.1-1ubuntu0.11:2.17.1-1ubuntu0.3
Show 21 moreShow less
1:2.17.1-1ubuntu0.41:2.17.1-1ubuntu0.51:2.17.1-1ubuntu0.61:2.17.1-1ubuntu0.71:2.17.1-1ubuntu0.81:2.17.1-1ubuntu0.91:2.17.1-1ubuntu0.101:2.17.1-1ubuntu0.111:2.17.1-1ubuntu0.121:2.17.1-1ubuntu0.131:2.17.1-1ubuntu0.141:2.17.1-1ubuntu0.151:2.17.1-1ubuntu0.161:2.17.1-1ubuntu0.171:2.17.1-1ubuntu0.181:2.17.1-1ubuntu0.18+esm11:2.17.1-1ubuntu0.18+esm21:2.17.1-1ubuntu0.18+esm31:2.17.1-1ubuntu0.18+esm41:2.17.1-1ubuntu0.18+esm61:2.17.1-1ubuntu0.18+esm8
 None known
git
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1:2.20.1-2ubuntu11:2.24.0-1ubuntu11:2.24.0-1ubuntu21:2.25.0-1ubuntu11:2.25.1-1ubuntu1
Show 21 moreShow less
1:2.25.1-1ubuntu21:2.25.1-1ubuntu31:2.25.1-1ubuntu3.11:2.25.1-1ubuntu3.21:2.25.1-1ubuntu3.31:2.25.1-1ubuntu3.41:2.25.1-1ubuntu3.51:2.25.1-1ubuntu3.61:2.25.1-1ubuntu3.71:2.25.1-1ubuntu3.81:2.25.1-1ubuntu3.101:2.25.1-1ubuntu3.111:2.25.1-1ubuntu3.121:2.25.1-1ubuntu3.131:2.25.1-1ubuntu3.141:2.25.1-1ubuntu3.14+esm11:2.25.1-1ubuntu3.14+esm21:2.25.1-1ubuntu3.14+esm31:2.25.1-1ubuntu3.14+esm41:2.25.1-1ubuntu3.14+esm51:2.25.1-1ubuntu3.14+esm6
 None known
git
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:2.32.0-1ubuntu11:2.33.1-1ubuntu11:2.34.1-1ubuntu11:2.34.1-1ubuntu1.11:2.34.1-1ubuntu1.2
Show 14 moreShow less
1:2.34.1-1ubuntu1.41:2.34.1-1ubuntu1.51:2.34.1-1ubuntu1.61:2.34.1-1ubuntu1.81:2.34.1-1ubuntu1.91:2.34.1-1ubuntu1.101:2.34.1-1ubuntu1.111:2.34.1-1ubuntu1.121:2.34.1-1ubuntu1.131:2.34.1-1ubuntu1.141:2.34.1-1ubuntu1.151:2.34.1-1ubuntu1.161:2.34.1-1ubuntu1.171:2.34.1-1ubuntu1.18
 None known
git
Ubuntu:24.04:LTS
 All versions, plus listed versions
1:2.40.1-1ubuntu11:2.43.0-1ubuntu11:2.43.0-1ubuntu51:2.43.0-1ubuntu61:2.43.0-1ubuntu7
Show 4 moreShow less
1:2.43.0-1ubuntu7.11:2.43.0-1ubuntu7.21:2.43.0-1ubuntu7.31:2.43.0-1ubuntu7.4
 None known

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1000021 is a medium vulnerability (CVSS 5.0) in Git-scm Git, published February 9, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.07%, the 65th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open