CVE-2018-17456
06.10.2018, 14:29
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.
| Vendor | Product | Version |
|---|---|---|
| git-scm | git | 2.14.0 ≤ 𝑥 < 2.14.5 |
| git-scm | git | 2.15.0 ≤ 𝑥 < 2.15.3 |
| git-scm | git | 2.16.0 ≤ 𝑥 < 2.16.5 |
| git-scm | git | 2.17.0 ≤ 𝑥 < 2.17.2 |
| git-scm | git | 2.18.0 ≤ 𝑥 < 2.18.1 |
| git-scm | git | 2.19.0 ≤ 𝑥 < 2.19.1 |
| redhat | ansible_tower | 3.3 |
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 6.7 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 7.3 |
| redhat | enterprise_linux | 7.4 |
| redhat | enterprise_linux | 7.5 |
| redhat | enterprise_linux | 7.6 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_server_aus | 7.6 |
| redhat | enterprise_linux_server_eus | 7.6 |
| redhat | enterprise_linux_server_tus | 7.6 |
| redhat | enterprise_linux_workstation | 7.0 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References