Skip to content
OpenAdvisories
Unscored USN-3287-1 1 CVE

git vulnerability

Published May 15, 2017 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Timo Schmid discovered that the Git restricted shell incorrectly filtered
allowed commands. A remote attacker could possibly use this issue to run an
interactive pager and access sensitive information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS git 1:1.9.1-1ubuntu0.5
Ubuntu · 16.04 LTS 16.04:LTS git 1:2.7.4-0ubuntu1.1

Vulnerabilities 1

  • Unscored —
    CVE-2017-8386 Public exploit EPSS 12%

    git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x b…

    git git git Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2017-8386