Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-GitUpgrade git-credential-libsecretUpgrade git-daemonUpgrade git-guiUpgrade git-coreUpgrade git-instawebUpgrade git-emailUpgrade git-svnUpgrade perl-Git-SVNUpgrade gitkUpgrade git-core-docUpgrade git-allUpgrade gitwebUpgrade gitUpgrade git-subtree | Jun 26, 2024 | May 14, 2024 |
| Alpine Linux | — | Upgrade git | Jun 6, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade git-credential-libsecretUpgrade git-allUpgrade perl-GitUpgrade git-debuginfoUpgrade git-p4Upgrade git-core-docUpgrade git-instawebUpgrade git-guiUpgrade gitwebUpgrade git-subtreeUpgrade perl-Git-SVNUpgrade git-daemonUpgrade gitUpgrade git-coreUpgrade git-cvsUpgrade gitkUpgrade git-emailUpgrade git-svn | May 31, 2024 | May 14, 2024 |
| Amazon_linux | — | Upgrade git | May 31, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade git-core-debuginfoUpgrade git-p4Upgrade git-core-docUpgrade gitUpgrade git-credential-libsecret-debuginfoUpgrade git-subtreeUpgrade git-daemonUpgrade git-debuginfoUpgrade gitkUpgrade git-emailUpgrade git-allUpgrade git-cvsUpgrade git-instawebUpgrade perl-GitUpgrade git-credential-libsecretUpgrade perl-Git-SVNUpgrade git-debugsourceUpgrade gitwebUpgrade git-svnUpgrade git-daemon-debuginfoUpgrade git-guiUpgrade git-core | Feb 17, 2025 | May 14, 2024 |
| Debian | — | Upgrade git | Jun 27, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gitUpgrade git-help | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gitUpgrade git-help | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gitUpgrade git-helpUpgrade git-core | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade git-helpUpgrade git | Oct 8, 2024 | May 14, 2024 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.6 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.8 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the LTSC 17.4 version stream, or upgrade to a newer supported version of Visual Studio 2022.Update Microsoft Visual Studio 2022 to the latest version in the current channel channel.Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019. | Jun 25, 2025 | May 14, 2024 |
| Oracle_linux | — | Upgrade git-allUpgrade git-daemonUpgrade git-emailUpgrade gitkUpgrade git-guiUpgrade git-instawebUpgrade perl-Git-SVNUpgrade perl-GitUpgrade git-core-docUpgrade git-svnUpgrade gitUpgrade gitwebUpgrade git-credential-libsecretUpgrade git-subtreeUpgrade git-core | Jun 25, 2024 | May 14, 2024 |
| Redhat_linux | — | No solution existsUpgrade git-guiUpgrade perl-Git-SVNUpgrade git-daemon-debuginfoUpgrade git-daemonUpgrade git-subtreeUpgrade git-debugsourceUpgrade git-credential-libsecretUpgrade git-instawebUpgrade git-svnUpgrade git-coreUpgrade gitkUpgrade gitwebUpgrade perl-GitUpgrade git-credential-libsecret-debuginfoUpgrade git-emailUpgrade git-core-docUpgrade git-allUpgrade git-core-debuginfoUpgrade gitUpgrade git-debuginfo | Jun 26, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade git-daemonUpgrade git-credential-libsecretUpgrade git-credential-libsecret-debuginfoUpgrade git-debuginfoUpgrade git-debugsourceUpgrade git-subtreeUpgrade git-daemon-debuginfoUpgrade git-core-debuginfoUpgrade git-coreUpgrade git | Jul 3, 2024 | May 14, 2024 |
| Suse | — | Upgrade git-svnUpgrade git-credential-libsecretUpgrade perl-GitUpgrade gitUpgrade git-coreUpgrade git-webUpgrade git-archUpgrade git-docUpgrade git-guiUpgrade git-cvsUpgrade git-p4Upgrade gitkUpgrade git-daemonUpgrade git-credential-gnome-keyringUpgrade git-email | May 29, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade gitUpgrade git (Ubuntu Pro) | Jun 6, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub