git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade git | Sep 20, 2017 | Jun 1, 2017 |
| Amazon_linux | — | Upgrade git | Jun 7, 2017 | May 10, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 1, 2017 |
| Centos_linux | — | Upgrade git-bzrUpgrade git-guiUpgrade perl-Git-SVNUpgrade git-svnUpgrade git-hgUpgrade gitwebUpgrade git-daemonUpgrade gitUpgrade git-p4Upgrade git-cvsUpgrade git-debuginfoUpgrade git-emailUpgrade emacs-gitUpgrade perl-GitUpgrade emacs-git-elUpgrade git-allUpgrade gitk | Aug 28, 2019 | Jun 1, 2017 |
| Debian | — | Upgrade git | May 10, 2017 | May 10, 2017 |
| Gentoo Linux | — | Upgrade dev-vcs/git. | Oct 30, 2017 | Jun 1, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade git | Nov 30, 2017 | Jun 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade git | Nov 30, 2017 | Jun 1, 2017 |
| Oracle Solaris | — | Upgrade developer/versioning/git to version 2.7.4-0.175.3.21.0.4.0 on Solaris 11.3 | Jun 20, 2017 | Jun 1, 2017 |
| Oracle_linux | — | Upgrade emacs-git-elUpgrade gitwebUpgrade git-hgUpgrade gitUpgrade perl-Git-SVNUpgrade gitkUpgrade git-bzrUpgrade git-p4Upgrade emacs-gitUpgrade git-cvsUpgrade git-allUpgrade git-daemonUpgrade perl-GitUpgrade git-svnUpgrade git-guiUpgrade git-email | Aug 8, 2017 | May 5, 2017 |
| Redhat_linux | — | Upgrade git-guiNo solution existsUpgrade git-cvsUpgrade perl-Git-SVNUpgrade git-daemonUpgrade git-bzrUpgrade perl-GitUpgrade git-svnUpgrade gitUpgrade emacs-git-elUpgrade gitwebUpgrade git-p4Upgrade emacs-gitUpgrade git-emailUpgrade git-debuginfoUpgrade gitkUpgrade git-hgUpgrade git-all | Aug 3, 2017 | May 10, 2017 |
| Suse | — | Upgrade git-webUpgrade git-cvsUpgrade git-docUpgrade gitkUpgrade gitUpgrade git-guiUpgrade git-svnUpgrade git-emailUpgrade git-daemonUpgrade git-coreUpgrade git-arch | May 19, 2017 | May 10, 2017 |
| Ubuntu | — | Upgrade git | May 15, 2017 | May 10, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 25, 2025 | Jun 1, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub