git vulnerabilities (openSUSE)
52 vulnerabilities.
-
gitopenSUSE Git GUI malicious command injection on Windows 8.6 High -
gitopenSUSE Git allows a buffer overflow in 'wincred' credential helper 6.3 Medium -
gitopenSUSE Git alllows arbitrary file writes via bundle-uri parameter injection 8.6 High -
gitopenSUSE Git allows arbitrary code execution through broken config quoting 8.1 High -
gitopenSUSE Git GUI can create and overwrite files for which the user has write permission 8.5 High -
gitopenSUSE Gitk allows arbitrary command execution 8.6 High -
gitopenSUSE Gitk can create and truncate files in the user's home directory 3.6 Low -
gitopenSUSE Newline confusion in credential helpers can lead to credential exfiltration in git 2.1 Low -
gitopenSUSE Git does not sanitize URLs when asking for credentials interactively 2.1 Low -
gitopenSUSE Git's protections for cloning untrusted repositories can be bypassed 7.4 High -
gitopenSUSE Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory 3.9 Low -
gitopenSUSE Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will 3.9 Low -
gitopenSUSE Git vulnerable to Remote Code Execution while cloning special-crafted local repositories 8.2 High -
gitopenSUSE Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution 9.1 Critical -
gitopenSUSE libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add` 8.6 High -
gitopenSUSE Arbitrary configuration injection via `git submodule deinit` 7.0 High -
gitopenSUSE Git looks for localized messages in the wrong place 3.3 Low -
gitopenSUSE "git apply --reject" partially-controlled arbitrary file write 7.5 High -
gitopenSUSE Git's `git apply` overwriting paths outside the working tree 6.2 Medium -
gitopenSUSE Git vulnerable to local clone-based data exfiltration with non-local transports 5.5 Medium -
gitopenSUSE Integer overflow in `git archive`, `git log --format` leading to RCE in git 9.8 Critical -
gitopenSUSE gitattributes parsing integer overflow in git 9.8 Critical -
gitopenSUSE Git vulnerable to Remote Code Execution via Heap overflow in `git shell` 8.5 High -
gitopenSUSE Git subject to exposure of sensitive information via local clone of symbolic links 5.5 Medium -
gitopenSUSE Bypass of safe.directory protections in Git 7.8 High -
gitopenSUSE Uncontrolled search for the Git directory in Git for Windows 6.0 Medium -
gitopenSUSE git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline... 7.5 High -
gitopenSUSE malicious repositories can execute remote code while cloning 8.0 High -
gitopenSUSE Malicious URLs can still cause Git to send a stored credential to the wrong server 4.0 Medium -
gitopenSUSE malicious URLs may cause Git to present stored credentials to the wrong server 9.3 Critical -
gitopenSUSE Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before... 7.8 High -
gitopenSUSE A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes... 8.8 High -
gitopenSUSE A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive... 7.5 High -
gitopenSUSE A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes... 8.8 High -
gitopenSUSE An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2,... 8.8 High -
gitopenSUSE CVE-2019-1353 does not affect BellSoft software 9.8 Critical -
gitopenSUSE A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes... 8.8 High -
gitopenSUSE A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes... 8.8 High -
gitopenSUSE CVE-2019-1348 does not affect BellSoft software 3.3 Low -
gitopenSUSE git-2.11.0-1.1 on GA media No score -
gitopenSUSE Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '... 9.8 Critical -
gitopenSUSE Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x... 9.8 Critical -
gitopenSUSE In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17... 7.5 High -
gitopenSUSE In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17... 7.8 High -
gitopenSUSE Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a... 5.5 Medium -
gitopenSUSE Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x... 8.8 High -
gitopenSUSE A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an... 8.8 High -
gitopenSUSE git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x... 8.8 High -
gitopenSUSE SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to... 5.9 Medium -
gitopenSUSE revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers... 9.8 Critical - Show olderLoading…