UBUNTU-CVE-2015-7545

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2015-7545

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-7545.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2015-7545

Related

Published

2015-12-09T00:00:00Z

Modified

2015-12-09T00:00:00Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.

References

Affected packages

Ubuntu:14.04:LTS / git

Package

Name: git
Purl: pkg:deb/ubuntu/git?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.9.1-1ubuntu0.2

Affected versions

1:1.*

1:1.8.3.2-1

1:1.8.4.2-1

1:1.8.4.3-1

1:1.8.4.4-1

1:1.8.5-1

1:1.8.5.1-1

1:1.8.5.2-1

1:1.8.5.2-2

1:1.8.5.3-1

1:1.9~rc1-1

1:1.9.0-1

1:1.9.1-1

1:1.9.1-1ubuntu0.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-all"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-arch"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-bzr"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-core"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-cvs"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-daemon-run"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-daemon-sysvinit"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-doc"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-el"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-email"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-gui"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-man"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-mediawiki"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "git-svn"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "gitk"
        },
        {
            "binary_version": "1:1.9.1-1ubuntu0.2",
            "binary_name": "gitweb"
        }
    ]
}