git-cvs vulnerabilities (Red Hat)
18 vulnerabilities.
-
git-cvsRed Hat Git allows arbitrary code execution through broken config quoting 8.1 High -
git-cvsRed Hat Arbitrary configuration injection via `git submodule deinit` 7.0 High -
git-cvsRed Hat "git apply --reject" partially-controlled arbitrary file write 7.5 High -
git-cvsRed Hat Integer overflow in `git archive`, `git log --format` leading to RCE in git 9.8 Critical -
git-cvsRed Hat gitattributes parsing integer overflow in git 9.8 Critical -
git-cvsRed Hat Malicious URLs can still cause Git to send a stored credential to the wrong server 4.0 Medium -
git-cvsRed Hat malicious URLs may cause Git to present stored credentials to the wrong server 9.3 Critical -
git-cvsRed Hat An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2,... 8.8 High -
git-cvsRed Hat Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x... 9.8 Critical -
git-cvsRed Hat In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17... 7.8 High -
git-cvsRed Hat A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an... 8.8 High -
git-cvsRed Hat git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x... 8.8 High -
git-cvsRed Hat contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1... 8.8 High -
git-cvsRed Hat revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers... 9.8 Critical -
git-cvsRed Hat Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)... 9.8 Critical -
git-cvsRed Hat The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4... 9.8 Critical -
git-cvsRed Hat The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a... 4.3 Medium -
git-cvsRed Hat Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to... 4.3 Medium