Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gitUpgrade git-allUpgrade gitwebUpgrade gitkUpgrade git-core-docUpgrade git-subtreeUpgrade git-svnUpgrade git-guiUpgrade git-daemonUpgrade perl-GitUpgrade git-credential-libsecretUpgrade git-instawebUpgrade perl-Git-SVNUpgrade git-coreUpgrade git-email | Jun 26, 2024 | May 14, 2024 |
| Alpine Linux | — | Upgrade git | Jun 6, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade git-credential-libsecretUpgrade git-core-docUpgrade gitwebUpgrade git-debuginfoUpgrade git-p4Upgrade git-allUpgrade git-guiUpgrade perl-GitUpgrade git-instawebUpgrade git-emailUpgrade git-coreUpgrade git-subtreeUpgrade git-cvsUpgrade gitUpgrade git-svnUpgrade perl-Git-SVNUpgrade git-daemonUpgrade gitk | May 31, 2024 | May 14, 2024 |
| Amazon_linux | — | Upgrade git | May 31, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade git-subtreeUpgrade git-credential-libsecret-debuginfoUpgrade git-p4Upgrade gitUpgrade git-emailUpgrade git-cvsUpgrade git-daemonUpgrade git-allUpgrade git-core-docUpgrade git-core-debuginfoUpgrade gitkUpgrade git-instawebUpgrade git-debuginfoUpgrade perl-GitUpgrade git-credential-libsecretUpgrade git-svnUpgrade git-daemon-debuginfoUpgrade git-guiUpgrade git-coreUpgrade gitwebUpgrade git-debugsourceUpgrade perl-Git-SVN | Feb 17, 2025 | May 14, 2024 |
| Debian | — | Upgrade git | Jun 27, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gitUpgrade git-help | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gitUpgrade git-help | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gitUpgrade git-helpUpgrade git-core | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade git-helpUpgrade git | Oct 8, 2024 | May 14, 2024 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.8 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.6 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.4 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017. | Jun 25, 2025 | May 14, 2024 |
| Oracle_linux | — | Upgrade git-subtreeUpgrade git-core-docUpgrade git-coreUpgrade gitUpgrade git-svnUpgrade git-credential-libsecretUpgrade gitwebUpgrade git-guiUpgrade git-daemonUpgrade git-instawebUpgrade git-allUpgrade perl-GitUpgrade git-emailUpgrade gitkUpgrade perl-Git-SVN | Jun 25, 2024 | May 14, 2024 |
| Redhat_linux | — | Upgrade git-core-docUpgrade git-allUpgrade gitUpgrade git-core-debuginfoUpgrade perl-GitUpgrade git-emailUpgrade gitwebUpgrade git-credential-libsecret-debuginfoUpgrade git-debuginfoUpgrade gitkUpgrade git-debugsourceUpgrade git-guiUpgrade git-svnUpgrade git-daemonUpgrade git-coreUpgrade git-credential-libsecretUpgrade git-daemon-debuginfoNo solution existsUpgrade git-subtreeUpgrade perl-Git-SVNUpgrade git-instaweb | Jun 26, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade git-daemonUpgrade git-credential-libsecret-debuginfoUpgrade git-credential-libsecretUpgrade git-coreUpgrade git-debuginfoUpgrade git-daemon-debuginfoUpgrade git-subtreeUpgrade gitUpgrade git-debugsourceUpgrade git-core-debuginfo | Jul 3, 2024 | May 14, 2024 |
| Suse | — | Upgrade gitkUpgrade git-guiUpgrade git-emailUpgrade git-daemonUpgrade git-credential-gnome-keyringUpgrade git-cvsUpgrade git-p4Upgrade git-svnUpgrade gitUpgrade git-archUpgrade git-docUpgrade perl-GitUpgrade git-webUpgrade git-coreUpgrade git-credential-libsecret | May 29, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade git (Ubuntu Pro)Upgrade git | Jun 6, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub