Detections
Analytics
EulerOS 2.0 SP12 : git (EulerOS-SA-2025-1415)
high Nessus Plugin ID 235415
Synopsis
The remote EulerOS host is missing a security update.Description
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called 'sideband channel'. These messages will be prefixed with 'remote:' and printed directly to the standard error output. Typically, this standard error output is connected to a terminal that understands ANSI escape sequences, which Git did not protect against. Most modern terminals support control sequences that can be used by a malicious actor to hide and misrepresent information, or to mislead the user into executing untrusted scripts. As requested on the git-security mailing list, the patches are under discussion on the public mailing list. Users are advised to update as soon as possible. Users unable to upgrade should avoid recursive clones unless they are from trusted sources.(CVE-2024-52005)
Tenable has extracted the preceding description block directly from the EulerOS git security advisory.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected git packages.See Also
Plugin Details
Severity: High
ID: 235415
File Name: EulerOS_SA-2025-1415.nasl
Version: 1.1
Type: local
Family: Huawei Local Security Checks
Published: 5/6/2025
Updated: 5/6/2025
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2024-52005
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 4.6
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 7.5
Threat Score: 4.8
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
CPE: p-cpe:/a:huawei:euleros:git, p-cpe:/a:huawei:euleros:git-help, cpe:/o:huawei:euleros:2.0, p-cpe:/a:huawei:euleros:git-core
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp
Excluded KB Items: Host/EulerOS/uvp_version
Exploit Ease: No known exploits are available
Patch Publication Date: 5/6/2025
Vulnerability Publication Date: 1/15/2025
Reference Information
CVE: CVE-2024-52005