Summary
Carlo Arenas discovered that Git incorrectly handled certain URLs
containing newlines, empty hosts, or lacking a scheme. A remote attacker
could possibly use this issue to trick Git into returning credential
information for a wrong host.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | git | 1:2.7.4-0ubuntu1.9 |
| Ubuntu · 18.04 LTS 18.04:LTS | git | 1:2.17.1-1ubuntu0.7 |
Vulnerabilities 1
-
Medium 4.0
Malicious URLs can still cause Git to send a stored credential to the wrong server
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that bug still left the door open for an expl…
References
-
report
https://ubuntu.com/security/CVE-2020-11008