Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade git-coreUpgrade git-emailUpgrade git-daemonUpgrade perl-Git-SVNUpgrade git-guiUpgrade git-credential-libsecretUpgrade git-svnUpgrade perl-GitUpgrade git-instawebUpgrade gitwebUpgrade git-core-docUpgrade gitUpgrade git-subtreeUpgrade git-allUpgrade gitk | Jun 26, 2024 | May 14, 2024 |
| Alpine Linux | — | Upgrade git | Jun 6, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade git-cvsUpgrade git-emailUpgrade gitkUpgrade git-svnUpgrade perl-Git-SVNUpgrade git-subtreeUpgrade gitUpgrade git-coreUpgrade git-daemonUpgrade git-guiUpgrade gitwebUpgrade git-core-docUpgrade git-debuginfoUpgrade git-allUpgrade git-p4Upgrade perl-GitUpgrade git-instawebUpgrade git-credential-libsecret | May 31, 2024 | May 14, 2024 |
| Amazon_linux | — | Upgrade git | May 31, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade gitwebUpgrade perl-Git-SVNUpgrade git-guiUpgrade perl-GitUpgrade git-svnUpgrade git-credential-libsecretUpgrade git-debugsourceUpgrade git-coreUpgrade git-daemon-debuginfoUpgrade gitkUpgrade git-credential-libsecret-debuginfoUpgrade gitUpgrade git-p4Upgrade git-emailUpgrade git-core-docUpgrade git-daemonUpgrade git-subtreeUpgrade git-instawebUpgrade git-allUpgrade git-debuginfoUpgrade git-cvsUpgrade git-core-debuginfo | Feb 17, 2025 | May 14, 2024 |
| Debian | — | Upgrade git | Jun 27, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gitUpgrade git-help | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gitUpgrade git-help | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gitUpgrade git-coreUpgrade git-help | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gitUpgrade git-help | Oct 8, 2024 | May 14, 2024 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.4 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel.Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.8 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.6 version stream, or upgrade to a newer supported version of Visual Studio 2022. | Jun 25, 2025 | May 14, 2024 |
| Oracle_linux | — | Upgrade perl-GitUpgrade gitkUpgrade git-daemonUpgrade perl-Git-SVNUpgrade git-guiUpgrade git-emailUpgrade git-instawebUpgrade git-allUpgrade git-core-docUpgrade gitwebUpgrade git-credential-libsecretUpgrade git-svnUpgrade git-coreUpgrade gitUpgrade git-subtree | Jun 25, 2024 | May 14, 2024 |
| Redhat_linux | — | Upgrade git-credential-libsecret-debuginfoUpgrade git-emailUpgrade git-core-debuginfoUpgrade perl-GitUpgrade git-debuginfoUpgrade git-allUpgrade git-core-docUpgrade gitUpgrade gitwebUpgrade gitkUpgrade perl-Git-SVNUpgrade git-daemon-debuginfoUpgrade git-svnUpgrade git-credential-libsecretUpgrade git-subtreeNo solution existsUpgrade git-guiUpgrade git-debugsourceUpgrade git-coreUpgrade git-daemonUpgrade git-instaweb | Jun 26, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade git-daemonUpgrade git-credential-libsecretUpgrade git-credential-libsecret-debuginfoUpgrade git-debugsourceUpgrade gitUpgrade git-coreUpgrade git-core-debuginfoUpgrade git-daemon-debuginfoUpgrade git-subtreeUpgrade git-debuginfo | Jul 3, 2024 | May 14, 2024 |
| Suse | — | Upgrade git-p4Upgrade gitkUpgrade git-daemonUpgrade git-credential-gnome-keyringUpgrade git-cvsUpgrade git-emailUpgrade git-guiUpgrade git-svnUpgrade gitUpgrade git-credential-libsecretUpgrade git-docUpgrade git-archUpgrade git-webUpgrade perl-GitUpgrade git-core | May 29, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade gitUpgrade git (Ubuntu Pro) | Jun 6, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub