The version of git installed on the remote host is prior to 2.37.1-1.76. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1623 advisory.

    A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in     a local multi-user system when running commands specified in the local repository configuration. This     issue allows the owner of the repository to cause arbitrary commands to be executed by other users who     access the repository. (CVE-2022-29187)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5511-1 advisory.

    Carlo Marcelo Arenas Beln discovered that an issue related to CVE-2022-24765 still affected Git. An     attacker could possibly use this issue to run arbitrary commands as administrator. (CVE-2022-29187)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2859 advisory.

    Git is a distributed revision control system with a decentralized architecture. As opposed to centralized     version control systems with a client-server model, Git ensures that each working copy of a Git repository     is an exact copy with complete revision history. This not only allows the user to work on and contribute     to projects without the need to have permission to push the changes to their official repositories, but     also makes it possible for the user to work with no network connection.

    Security Fix(es):

    * git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree     (CVE-2022-24765)

    * git: Bypass of safe.directory protections (CVE-2022-29187)

    * git: exposure of sensitive information to a malicious actor (CVE-2022-39253)

    * git: git shell function that splits command arguments can lead to arbitrary heap writes.
    (CVE-2022-39260)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-470c7ea49e advisory.

    Update to 1.3.2 (CVE-2022-29187, CVE-2022-24765)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-e3c8abd37e advisory.

    This update contains rebuilds of all Rust applications against versions of the libgit2-sys crate that ship     fixes for CVE-2022-24765 and CVE-2022-29187 in the bundled copies of libgit2.

    ----

    Updates `pore` to 0.1.8

    - Speed up `update_remote_refs`
    - Fall back to `/etc/pore.toml` if it exists.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the git package has been released.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5936:07 advisory.

    * git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree     (CVE-2022-24765)
      * git: Bypass of safe.directory protections (CVE-2022-29187)
      * git: exposure of sensitive information to a malicious actor (CVE-2022-39253)
      * git: git shell function that splits command arguments can lead to arbitrary heap writes.
    (CVE-2022-39260)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
163866	Amazon Linux AMI : git (ALAS-2022-1623)	Nessus	Amazon Linux Local Security Checks	8/5/2022	12/11/2024	high
163112	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Git vulnerabilities (USN-5511-1)	Nessus	Ubuntu Local Security Checks	7/14/2022	8/27/2024	high
175878	RHEL 8 : git (RHSA-2023:2859)	Nessus	Red Hat Local Security Checks	5/16/2023	11/7/2024	high
170692	Fedora 37 : libgit2 (2023-470c7ea49e)	Nessus	Fedora Local Security Checks	1/27/2023	11/14/2024	high
170756	Fedora 37 : rust-bat / rust-cargo-c / rust-exa / rust-git-delta / rust-gitui / etc (2023-e3c8abd37e)	Nessus	Fedora Local Security Checks	1/28/2023	11/14/2024	high
252274	Photon OS 5.0: Git PHSA-2025-5.0-0590	Nessus	PhotonOS Local Security Checks	8/19/2025	8/23/2025	critical
293144	MiracleLinux 8 : git-2.39.1-1.el8 (AXSA:2023-5936:07)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

critical

high