Vulnerability in N/a
CVE-2018-17456
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodule…
EPSS: 0.592 (98.3th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 45631 (exploit, x_refsource_EXPLOIT-DB)
- 105523 (vdb-entry, x_refsource_BID)
- 1041811 (vdb-entry, x_refsource_SECTRACK)
- DSA-4311 (vendor-advisory, x_refsource_DEBIAN)
- RHSA-2018:3505 (x_refsource_REDHAT, vendor-advisory)
- github.com/git/git/commit/1a7fd1fb2998002da6e9ff2ee46e1bdd25ee8404 (x_refsource_MISC)
- 45548 (exploit, x_refsource_EXPLOIT-DB)
- RHSA-2018:3541 (x_refsource_REDHAT, vendor-advisory)
- github.com/git/git/commit/a124133e1e6ab5c7a9fef6d0e6bcb084e3455b46 (x_refsource_MISC)
- RHSA-2018:3408 (x_refsource_REDHAT, vendor-advisory)
Frequently asked questions
- What is CVE-2018-17456?
- CVE-2018-17456 is a vulnerability in N/a. Published 2018-10-06.
- Is CVE-2018-17456 known to be exploited?
- 29 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.