CVE-2018-11235
git: In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, rem...
CVE-2018-11235 is fixed in 13 products on 1 platform, first by git 1:2.17.1-1ubuntu0.1, released May 29, 2018. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
n/a
High
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.4806
98th percentile
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| git · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-all · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-all 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-cvs · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-cvs 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-daemon-run · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-daemon-run 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-daemon-sysvinit · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-daemon-sysvinit 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-el · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-el 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-email · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-email 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-gui · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-gui 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-man · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-man 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-mediawiki · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-mediawiki 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| git-svn · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | git-svn 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| gitk · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | gitk 1:2.17.1-1ubuntu0.1 | May 29, 2018 |
| gitweb · Ubuntu 18.04.6 LTS (bionic) | 1:2.17.1-1ubuntu0.1 | gitweb 1:2.17.1-1ubuntu0.1 | May 29, 2018 |