The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3245 advisory.

  - git: data exfiltration with maliciously crafted repository (CVE-2023-22490)

  - git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)

  - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)

  - git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)

  - git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : git (RHSA-2023:3245)

high Nessus Plugin ID 176202

Version 1.2