Every CVE Search/ Get API key

CVE-2017-8386

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x...

8.8 HighPublic exploitFix available

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

12.4%Up 8.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Record
CVE-2017-8386
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Record
CVE-2017-8386
Updated
2026-11-02
EUVDEUVD-2017-17339 No score

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Record
EUVD-2017-17339
Updated
2026-11-03
GitHub AdvisoriesGHSA-xqh5-ghjx-6xv5 8.8

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x...

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Record
GHSA-xqh5-ghjx-6xv5
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALPINE-CVE-2017-8386 8.8

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Record
ALPINE-CVE-2017-8386
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2017-8386 8.8

CVE-2017-8386 does not affect BellSoft software

Record
BELL-CVE-2017-8386
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 10 moreShow less
OSV 8.8

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Record
CVE-2017-8386
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-8386 8.8

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Record
DEBIAN-CVE-2017-8386
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:2004 7.8

Red Hat Security Advisory: git security and bug fix update

Record
RHSA-2017:2004
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:2491 6.3

Red Hat Security Advisory: rh-git29-git security update

Record
RHSA-2017:2491
CVSS 3.0
6.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2017-8386 8.8

git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.

Record
UBUNTU-CVE-2017-8386
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2017-0153 No score

Updated git packages fix security vulnerability

Timo Schmid of ERNW GmbH discovered that the Git git-shell, a restricted login shell for Git-only SSH access, allows a user to run an interactive pager by causing it to spawn "git upload-pack --help" (CVE-2017-8386).

Record
MGASA-2017-0153
Updated
2026-11-02
OSVopenSUSE-SU-2024:10786-1 No score

git-2.33.0-1.3 on GA media

These are all security issues fixed in the git-2.33.0-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10786-1
Updated
2026-11-02
OSVSUSE-SU-2017:1357-1 No score

Security update for git

This update for git fixes the following issues:

  • git 2.12.3:
  • CVE-2017-8386: Fix git-shell not to escape with the starting dash name (bsc#1038395)
  • Fix for potential segv introduced in v2.11.0 and later
  • Misc fixes and cleanups.
  • git 2.12.2:
    • CLI output fixes
    • 'Dump http' transport fixes
    • various fixes for internal code paths
    • Trailer 'Cc:' RFC fix
  • git 2.12.1:
    • Reduce authentication round-trip over HTTP when the server supports just a single authentication method.
    • 'git add -i' patch subcommand fixed to have a path selection
    • various path verification fixes
    • fix 'git log -L...' buffer overrun
Record
SUSE-SU-2017:1357-1
Updated
2026-11-02
OSVSUSE-SU-2017:1432-1 No score

Security update for git

This update for git fixes the following issue:

  • CVE-2017-8386: git shell, may allow a user who comes over SSH to run an interactive pager by causing it to spawn 'git upload-pack --help' (bsc#1038395):
Record
SUSE-SU-2017:1432-1
Updated
2026-11-02
OSVUSN-3287-1 No score

git vulnerability

Timo Schmid discovered that the Git restricted shell incorrectly filtered allowed commands. A remote attacker could possibly use this issue to run an interactive pager and access sensitive information.

Record
USN-3287-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
git
Alpine:v3.3
 before 2.6.7-r0
2.6.7-r0
git
Debian:12
 before 1:2.11.0-3
1:2.11.0-3
git
Debian:13
 before 1:2.11.0-3
1:2.11.0-3
git
Debian:14
 before 1:2.11.0-3
1:2.11.0-3
git
Debian:7
 before 1:1.7.10.4-1+wheezy4, plus listed versions
1:1.7.10.4-1+wheezy11:1.7.10.4-1+wheezy21:1.7.10.4-1+wheezy3
1:1.7.10.4-1+wheezy4
git
Debian:8
 before 1:2.1.4-2.1+deb8u3, plus listed versions
1:2.1.4-2.11:2.1.4-2.1+deb8u11:2.1.4-2.1+deb8u2
1:2.1.4-2.1+deb8u3
git
Mageia:5
 before 2.7.4-1.1.mga5
2.7.4-1.1.mga5
emacs-git
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
emacs-git-el
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
Show 109 moreShow less
Affected packages
PackageAffectedFixed
git-all
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-bzr
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-cvs
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-daemon
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-email
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-gui
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-hg
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-p4
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-svn
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
gitk
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
gitweb
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
perl-Git
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
perl-Git-SVN
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
emacs-git
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
emacs-git-el
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-all
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-bzr
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-cvs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-daemon
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-email
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-gui
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-hg
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-p4
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-svn
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
gitk
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
gitweb
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
perl-Git
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
perl-Git-SVN
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
emacs-git
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
emacs-git-el
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-all
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-bzr
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-cvs
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-daemon
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-email
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-gui
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-hg
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-p4
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-svn
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
gitk
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
gitweb
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
perl-Git-SVN
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
perl-Git
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
emacs-git
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
emacs-git-el
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-all
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-bzr
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-cvs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-daemon
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-email
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-gui
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-hg
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-p4
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git-svn
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
gitk
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
gitweb
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
perl-Git-SVN
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
git
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
perl-Git
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.8.3.1-11.el7
0:1.8.3.1-11.el7
rh-git29-emacs-git
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-emacs-git-el
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-all
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-core
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-core-doc
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-cvs
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-daemon
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-debuginfo
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-email
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-gui
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-p4
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git-svn
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-gitk
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-gitweb
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-perl-Git
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-perl-Git-SVN
Red Hat:rhel_software_collections:2::el6
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el6
0:2.9.3-3.el6
rh-git29-git
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-all
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-core
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-core-doc
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-cvs
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-daemon
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-debuginfo
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-email
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-gui
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-p4
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-git-svn
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-gitk
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-gitweb
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-perl-Git
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
rh-git29-perl-Git-SVN
Red Hat:rhel_software_collections:2::el7
From an advisory covering 2 CVEs
 before 0:2.9.3-3.el7
0:2.9.3-3.el7
git
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 2.12.3-26.1
2.12.3-26.1
git
SUSE:Linux Enterprise Software Development Kit 12 SP1
 before 2.12.3-26.1
2.12.3-26.1
git
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 2.12.3-26.1
2.12.3-26.1
git
SUSE:Linux Enterprise Server 12 SP1
 before 2.12.3-26.1
2.12.3-26.1
git
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 2.12.3-26.1
2.12.3-26.1
git
SUSE:Linux Enterprise Server 12 SP2
 before 2.12.3-26.1
2.12.3-26.1
git
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 2.12.3-26.1
2.12.3-26.1
git
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 1.7.12.4-0.17.1
1.7.12.4-0.17.1
git
SUSE:Studio Onsite 1.3
 before 1.7.12.4-0.17.1
1.7.12.4-0.17.1
git
Ubuntu:14.04:LTS
 before 1:1.9.1-1ubuntu0.5, plus listed versions
1:1.8.3.2-11:1.8.4.2-11:1.8.4.3-11:1.8.4.4-11:1.8.5-1
Show 11 moreShow less
1:1.8.5.1-11:1.8.5.2-11:1.8.5.2-21:1.8.5.3-11:1.9~rc1-11:1.9.0-11:1.9.1-11:1.9.1-1ubuntu0.11:1.9.1-1ubuntu0.21:1.9.1-1ubuntu0.31:1.9.1-1ubuntu0.4
1:1.9.1-1ubuntu0.5
git
Ubuntu:16.04:LTS
 before 1:2.7.4-0ubuntu1.1, plus listed versions
1:2.5.0-11:2.6.2-11:2.6.3-11:2.6.4-11:2.7.0~rc3-11:2.7.0-11:2.7.3-0ubuntu11:2.7.4-0ubuntu1
1:2.7.4-0ubuntu1.1
git
openSUSE:Tumbleweed
From an advisory covering 21 CVEs
 before 2.33.0-1.3
2.33.0-1.3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubsuz1n/WHS3_vulhub2025-04-27

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-8386 is a high vulnerability (CVSS 8.8) in Git Git-shell, published May 10, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.4%, the 96th percentile. Fixed in git 2.6.7-r0.

References

Show 65 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open