Skip to content
OpenAdvisories
Unscored USN-3829-1 2 CVEs

git vulnerabilities

Published Nov 27, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Git incorrectly handled layers of tree objects.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2017-15298)

It was discovered that Git incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10.
(CVE-2018-19486)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS git 1:1.9.1-1ubuntu0.10
Ubuntu · 16.04 LTS 16.04:LTS git 1:2.7.4-0ubuntu1.6
Ubuntu · 18.04 LTS 18.04:LTS git 1:2.17.1-1ubuntu0.4

Vulnerabilities 2

  • Unscored —
    CVE-2017-15298

    Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memor…

    git git Debian Ubuntu
  • Unscored —
    CVE-2018-19486

    Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of …

    git git git Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2017-15298
  • report
    https://ubuntu.com/security/CVE-2018-19486