emacs-git vulnerabilities (Red Hat)

18 vulnerabilities.

• emacs-git Red Hat Git allows arbitrary code execution through broken config quoting CVE-2025-48384 In KEVPublic exploitFix available 8.1 HighJuly 8, 2025
• emacs-git Red Hat Arbitrary configuration injection via `git submodule deinit` CVE-2023-29007 Public exploitFix available 7.0 HighApril 25, 2023
• emacs-git Red Hat "git apply --reject" partially-controlled arbitrary file write CVE-2023-25652 Fix available EPSS 51.9% 7.5 HighApril 25, 2023
• emacs-git Red Hat Integer overflow in `git archive`, `git log --format` leading to RCE in git CVE-2022-41903 Public exploitFix available EPSS 44.3% 9.8 CriticalJanuary 17, 2023
• emacs-git Red Hat gitattributes parsing integer overflow in git CVE-2022-23521 Fix available EPSS 56.3% 9.8 CriticalJanuary 17, 2023
• emacs-git Red Hat Malicious URLs can still cause Git to send a stored credential to the wrong server CVE-2020-11008 Fix available 4.0 MediumApril 20, 2020
• emacs-git Red Hat malicious URLs may cause Git to present stored credentials to the wrong server CVE-2020-5260 Public exploitFix available EPSS 14.9% 9.3 CriticalApril 14, 2020
• emacs-git Red Hat An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2,... CVE-2019-1387 Fix available 8.8 HighDecember 10, 2019
• emacs-git Red Hat Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x... CVE-2018-17456 Public exploitFix available EPSS 97.4% 9.8 CriticalOctober 5, 2018
• emacs-git Red Hat In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17... CVE-2018-11235 Public exploitFix available EPSS 48.1% 7.8 HighMay 29, 2018
• emacs-git Red Hat A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an... CVE-2017-1000117 Public exploitFix available EPSS 77.8% 8.8 HighAugust 10, 2017
• emacs-git Red Hat git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x... CVE-2017-8386 Public exploitFix available EPSS 12.4% 8.8 HighMay 10, 2017
• emacs-git Red Hat contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1... CVE-2014-9938 Fix available 8.8 HighMarch 19, 2017
• emacs-git Red Hat revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers... CVE-2016-2315 Fix available EPSS 17.3% 9.8 CriticalMarch 16, 2016
• emacs-git Red Hat Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)... CVE-2016-2324 Fix available EPSS 18.1% 9.8 CriticalMarch 15, 2016
• emacs-git Red Hat The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4... CVE-2015-7545 Public exploitFix available EPSS 18.7% 9.8 CriticalDecember 9, 2015
• emacs-git Red Hat The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a... CVE-2013-0308 Fix available 4.3 MediumMarch 8, 2013
• emacs-git Red Hat Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to... CVE-2010-3906 Public exploitFix available 4.3 MediumDecember 17, 2010