CVE-2018-11233
git: In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, cod...
CVE-2018-11233 is fixed in 13 products on 1 platform, first by git 1:2.17.1-1ubuntu0.1, released May 29, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0441
91st percentile
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| git · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-all · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-all 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-cvs · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-cvs 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-daemon-run · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-daemon-run 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-daemon-sysvinit · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-daemon-sysvinit 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-el · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-el 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-email · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-email 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-gui · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-gui 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-man · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-man 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-mediawiki · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-mediawiki 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-svn · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-svn 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| gitk · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | gitk 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| gitweb · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | gitweb 1:2.17.1-1ubuntu0.1 | May 29, 2018 |