git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.

According to the versions of the git packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,     which may result in unexpected cross-protocol requests, as demonstrated by the     git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. (CVE-2021-40330)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3145 advisory.

  - Git is an open-source distributed revision control system. In affected versions of Git a specially crafted     repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may     cause just-checked out script to be executed while cloning onto a case-insensitive file system such as     NTFS, HFS+ or APFS (i.e. the default file systems on Windows and macOS). Note that clean/smudge filters     have to be configured for that. Git for Windows configures Git LFS by default, and is therefore     vulnerable. The problem has been patched in the versions published on Tuesday, March 9th, 2021. As a     workaound, if symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks     false`), the described attack won't work. Likewise, if no clean/smudge filters such as Git LFS are     configured globally (i.e. _before_ cloning), the attack is foiled. As always, it is best to avoid cloning     repositories from untrusted sources. The earliest impacted version is 2.14.2. The fix versions are:
    2.30.1, 2.29.3, 2.28.1, 2.27.1, 2.26.3, 2.25.5, 2.24.4, 2.23.4, 2.22.5, 2.21.4, 2.20.5, 2.19.6, 2.18.5,     2.17.62.17.6. (CVE-2021-21300)

  - git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,     which may result in unexpected cross-protocol requests, as demonstrated by the     git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. (CVE-2021-40330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,     which may result in unexpected cross-protocol requests, as demonstrated by the     git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. (CVE-2021-40330)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3484-1 advisory.

  - git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,     which may result in unexpected cross-protocol requests, as demonstrated by the     git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. (CVE-2021-40330)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1345-1 advisory.

  - git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,     which may result in unexpected cross-protocol requests, as demonstrated by the     git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. (CVE-2021-40330)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3300-1 advisory.

  - git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,     which may result in unexpected cross-protocol requests, as demonstrated by the     git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. (CVE-2021-40330)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the git package has been released.

  - git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,     which may result in unexpected cross-protocol requests, as demonstrated by the     git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. (CVE-2021-40330)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5076-1 advisory.

  - git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,     which may result in unexpected cross-protocol requests, as demonstrated by the     git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. (CVE-2021-40330)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
169644	EulerOS Virtualization 3.0.2.6 : git (EulerOS-SA-2023-1078)	Nessus	Huawei Local Security Checks	high
166092	Debian DLA-3145-1 : git - LTS security update	Nessus	Debian Local Security Checks	high
158434	EulerOS 2.0 SP10 : git (EulerOS-SA-2022-1223)	Nessus	Huawei Local Security Checks	high
158413	EulerOS 2.0 SP10 : git (EulerOS-SA-2022-1204)	Nessus	Huawei Local Security Checks	high
157993	EulerOS Virtualization 3.0.6.6 : git (EulerOS-SA-2022-1120)	Nessus	Huawei Local Security Checks	high
157927	EulerOS Virtualization 3.0.6.0 : git (EulerOS-SA-2022-1043)	Nessus	Huawei Local Security Checks	high
157193	EulerOS 2.0 SP9 : git (EulerOS-SA-2022-1005)	Nessus	Huawei Local Security Checks	high
157184	EulerOS 2.0 SP9 : git (EulerOS-SA-2022-1025)	Nessus	Huawei Local Security Checks	high
156423	EulerOS 2.0 SP5 : git (EulerOS-SA-2021-2929)	Nessus	Huawei Local Security Checks	high
156296	EulerOS 2.0 SP8 : git (EulerOS-SA-2021-2801)	Nessus	Huawei Local Security Checks	high
154323	SUSE SLED12 / SLES12 Security Update : git (SUSE-SU-2021:3484-1)	Nessus	SuSE Local Security Checks	high
154009	openSUSE 15 Security Update : git (openSUSE-SU-2021:1345-1)	Nessus	SuSE Local Security Checks	high
153905	SUSE SLED15 / SLES15 Security Update : git (SUSE-SU-2021:3300-1)	Nessus	SuSE Local Security Checks	high
153506	Photon OS 1.0: Git PHSA-2021-1.0-0433	Nessus	PhotonOS Local Security Checks	high
153496	Photon OS 4.0: Git PHSA-2021-4.0-0099	Nessus	PhotonOS Local Security Checks	high
153493	Photon OS 2.0: Git PHSA-2021-2.0-0391	Nessus	PhotonOS Local Security Checks	high
153492	Photon OS 3.0: Git PHSA-2021-3.0-0299	Nessus	PhotonOS Local Security Checks	high
153243	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Git vulnerability (USN-5076-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2021-40330

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high