Detections
Analytics

EulerOS 2.0 SP10 : git (EulerOS-SA-2025-2093)

high Nessus Plugin ID 264470

Synopsis

The remote EulerOS host is missing a security update.

Description

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

 Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout.(CVE-2025-48384)

Tenable has extracted the preceding description block directly from the EulerOS git security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected git packages.

See Also

http://www.nessus.org/u?f1ef4717

Plugin Details

Severity: High

ID: 264470

File Name: EulerOS_SA-2025-2093.nasl

Version: 1.1

Type: local

Published: 9/10/2025

Updated: 9/10/2025

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 10.0

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 6

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2025-48384

CVSS v3

Risk Factor: High

Base Score: 8

Temporal Score: 7.4

Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:huawei:euleros:git, p-cpe:/a:huawei:euleros:git-help, cpe:/o:huawei:euleros:2.0

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp

Excluded KB Items: Host/EulerOS/uvp_version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/9/2025

Vulnerability Publication Date: 7/8/2025

CISA Known Exploited Vulnerability Due Dates: 9/15/2025

Reference Information

CVE: CVE-2025-48384