Medium USN-5376-1 1 CVE

git vulnerability

Published Apr 12, 2022 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

俞晨东 discovered that Git incorrectly handled certain repository paths
in platforms with multiple users support. An attacker could possibly use
this issue to run arbitrary commands.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	git	1:2.17.1-1ubuntu0.10
Ubuntu · 20.04 LTS 20.04:LTS	git	1:2.25.1-1ubuntu3.3

Vulnerabilities 1

Medium 6.0

CVE-2022-24765 Public exploit

Uncontrolled search for the Git directory in Git for Windows

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder `C:\.git`, …

git-for-windows git git git Debian Ubuntu Alpine

Apr 12, 2022

References

report
https://ubuntu.com/security/CVE-2022-24765