Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade git-core-docUpgrade git-subtreeUpgrade git-allUpgrade gitUpgrade gitkUpgrade gitwebUpgrade git-daemonUpgrade git-guiUpgrade git-coreUpgrade git-svnUpgrade perl-Git-SVNUpgrade perl-GitUpgrade git-emailUpgrade git-instawebUpgrade git-credential-libsecret | Jun 26, 2024 | May 14, 2024 |
| Alpine Linux | — | Upgrade git | Jun 6, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade git-guiUpgrade gitwebUpgrade perl-GitUpgrade git-instawebUpgrade git-core-docUpgrade git-allUpgrade git-p4Upgrade git-debuginfoUpgrade git-credential-libsecretUpgrade gitkUpgrade git-emailUpgrade git-cvsUpgrade git-subtreeUpgrade perl-Git-SVNUpgrade git-daemonUpgrade gitUpgrade git-svnUpgrade git-core | May 31, 2024 | May 14, 2024 |
| Amazon_linux | — | Upgrade git | May 31, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade git-emailUpgrade git-credential-libsecret-debuginfoUpgrade git-debuginfoUpgrade gitkUpgrade git-allUpgrade git-p4Upgrade git-cvsUpgrade git-core-docUpgrade gitUpgrade git-daemonUpgrade git-core-debuginfoUpgrade git-instawebUpgrade git-subtreeUpgrade git-svnUpgrade perl-Git-SVNUpgrade perl-GitUpgrade git-daemon-debuginfoUpgrade git-debugsourceUpgrade git-coreUpgrade gitwebUpgrade git-guiUpgrade git-credential-libsecret | Feb 17, 2025 | May 14, 2024 |
| Debian | — | Upgrade git | Jun 27, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gitUpgrade git-help | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade git-helpUpgrade git | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gitUpgrade git-helpUpgrade git-core | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade git-helpUpgrade git | Oct 8, 2024 | May 14, 2024 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.8 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.6 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel.Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.4 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019. | Jun 25, 2025 | May 14, 2024 |
| Oracle_linux | — | Upgrade git-subtreeUpgrade git-core-docUpgrade git-svnUpgrade git-coreUpgrade gitwebUpgrade git-credential-libsecretUpgrade gitUpgrade git-guiUpgrade perl-Git-SVNUpgrade git-daemonUpgrade git-emailUpgrade perl-GitUpgrade git-allUpgrade gitkUpgrade git-instaweb | Jun 25, 2024 | May 14, 2024 |
| Redhat_linux | — | Upgrade git-daemonUpgrade git-debugsourceUpgrade git-instawebUpgrade git-credential-libsecretUpgrade git-subtreeUpgrade git-svnUpgrade git-guiUpgrade git-daemon-debuginfoNo solution existsUpgrade git-coreUpgrade perl-Git-SVNUpgrade git-credential-libsecret-debuginfoUpgrade perl-GitUpgrade git-core-debuginfoUpgrade git-allUpgrade git-core-docUpgrade git-emailUpgrade gitUpgrade gitkUpgrade gitwebUpgrade git-debuginfo | Jun 26, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade git-subtreeUpgrade gitUpgrade git-daemon-debuginfoUpgrade git-debugsourceUpgrade git-coreUpgrade git-core-debuginfoUpgrade git-debuginfoUpgrade git-credential-libsecret-debuginfoUpgrade git-credential-libsecretUpgrade git-daemon | Jul 3, 2024 | May 14, 2024 |
| Suse | — | Upgrade git-p4Upgrade git-cvsUpgrade git-credential-gnome-keyringUpgrade git-daemonUpgrade git-emailUpgrade gitkUpgrade git-guiUpgrade gitUpgrade git-credential-libsecretUpgrade git-coreUpgrade git-docUpgrade git-archUpgrade git-webUpgrade git-svnUpgrade perl-Git | May 29, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade gitUpgrade git (Ubuntu Pro) | Jun 6, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub