The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute
    arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when
    checking out a working tree. (CVE-2014-9706)

Fix for CVE-2014-9706 (rhbz#1204889, rhbz#1204890, and rhbz#1204891)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities have been discovered in Dulwich, a Python implementation of the file formats and protocols used by the Git version control system. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2014-9706     It was discovered that Dulwich allows writing to files     under .git/ when checking out working trees. This could     lead to the execution of arbitrary code with the     privileges of the user running an application based on     Dulwich.

  - CVE-2015-0838     Ivan Fratric of the Google Security Team has found a     buffer overflow in the C implementation of the     apply_delta() function, used when accessing Git objects     in pack files. An attacker could take advantage of this     flaw to cause the execution of arbitrary code with the     privileges of the user running a Git server or client     based on Dulwich.

ID	Name	Product	Family	Severity
433633	SCA: security update for dulwich (GHSA-4j5j-58j7-6c3w)	Tenable Cloud Security	SCA Checks	critical
433633	SCA: security update for dulwich (GHSA-4j5j-58j7-6c3w)	Tenable Self-Hosted Container Security	SCA Checks	critical
401125	Alpine: dulwich: security update to 0.9.7-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
401125	Alpine: dulwich: security update to 0.9.7-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
82940	Fedora 22 : python-dulwich-0.10.0-1.fc22 (2015-4639)	Nessus	Fedora Local Security Checks	high
82727	Fedora 21 : python-dulwich-0.10.0-1.fc21 (2015-4575)	Nessus	Fedora Local Security Checks	high
82726	Fedora 20 : python-dulwich-0.10.0-1.fc20 (2015-4534)	Nessus	Fedora Local Security Checks	high
82303	Debian DSA-3206-1 : dulwich - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2014-9706

critical

Tenable Plugins

critical

critical

high

high

high

high

high

high