Skip to content
OpenAdvisories
Unscored USN-3791-1 1 CVE

git vulnerability

Published Oct 12, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that git did not properly validate git submodule
urls or paths. A remote attacker could possibly use this to craft a
git repository that causes arbitrary code execution when recursive
operations are used.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS git 1:1.9.1-1ubuntu0.9
Ubuntu · 16.04 LTS 16.04:LTS git 1:2.7.4-0ubuntu1.5
Ubuntu · 18.04 LTS 18.04:LTS git 1:2.17.1-1ubuntu0.3

Vulnerabilities 1

  • Unscored —
    CVE-2018-17456 Public exploit EPSS 97%

    Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x b…

    git git git Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-17456