The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0228 advisory.

    Git is a distributed revision control system with a decentralized architecture. As opposed to centralized     version control systems with a client-server model, Git ensures that each working copy of a Git repository     is an exact copy with complete revision history. This not only allows the user to work on and contribute     to projects without the need to have permission to push the changes to their official repositories, but     also makes it possible for the user to work with no network connection.

    The following packages have been upgraded to a later upstream version: git (2.18.2). (BZ#1784057)

    Security Fix(es):

    * git: Remote code execution in recursive clones with nested submodules (CVE-2019-1387)

    * git: Arbitrary path overwriting via export-marks in-stream command feature (CVE-2019-1348)

    * git: Recursive submodule cloning allows using git directory twice with synonymous directory name written     in .git/ (CVE-2019-1349)

    * git: Files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams     (CVE-2019-1352)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202003-42 (libgit2: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libgit2. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could possibly overwrite arbitrary paths, execute arbitrary       code, and overwrite files in the .git directory.
  Workaround :

    There is no known workaround at this time.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:4356 advisory.

  - git: Arbitrary path overwriting via export-marks in-stream command feature (CVE-2019-1348)

  - git: Recursive submodule cloning allows using git directory twice with synonymous directory name written     in .git/ (CVE-2019-1349)

  - git: Files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams     (CVE-2019-1352)

  - git: Remote code execution in recursive clones with nested submodules (CVE-2019-1387)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of git installed on the remote host is prior to 2.23.1-0. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1943 advisory.

    A flaw was found in the git fast-import command where it provides the export-marks feature that may     unexpectedly overwrite arbitrary paths. An attacker can abuse this flaw if they can control the input     passed to the fast-import command by using the export-marks feature and overwrite arbitrary files, but     would not have complete control on the content of the file. (CVE-2019-1348)

    An improper input validation flaw was discovered in git in the way it handles git submodules. A remote     attacker could abuse this flaw to trick a victim user into recursively cloning a malicious repository,     which, under certain circumstances, could fool git into using the same git directory twice and potentially     cause remote code execution. (CVE-2019-1349)

    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka     'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349,     CVE-2019-1352, CVE-2019-1354, CVE-2019-1387. (CVE-2019-1350)

    A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka     'Git for Visual Studio Tampering Vulnerability'. (CVE-2019-1351)

    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka     'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349,     CVE-2019-1350, CVE-2019-1354, CVE-2019-1387. (CVE-2019-1352)

    An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3,     v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux (also known as WSL)     while accessing a working directory on a regular Windows drive, none of the NTFS protections were active.
    (CVE-2019-1353)

    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka     'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349,     CVE-2019-1350, CVE-2019-1352, CVE-2019-1387. (CVE-2019-1354)

    A flaw was discovered where git improperly validates submodules' names used to construct git metadata     paths and does not prevent them from being nested in existing directories used to store another     submodule's metadata. A remote attacker could abuse this flaw to trick a victim user into cloning a     malicious repository containing submodules, which, when recursively cloned, would trigger the flaw and     remotely execute code on the victim's machine. (CVE-2019-1387)

    A security bypass was discovered in git, which allows arbitrary commands to be executed during the update     of git submodules. A remote attacker may trick a victim user into cloning a malicious repository that     initially looks fine, allowing access to bypass the security mechanisms that prevent the execution of     arbitrary commands during the submodule initialization. After following an update of the repository and     the submodules done by the victim user, vulnerable versions of git may use the update setting in the     .gitmodules file and execute arbitrary commands. (CVE-2019-19604)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0109 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2019-1351:
    A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka     'Git for Visual Studio Tampering Vulnerability'.

    CVE-2019-1354:
    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka     'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349,     CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.

    CVE-2019-1387:
    An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3,     v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused     by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in     recursive clones.

    CVE-2020-5260:
    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials     to a host controlled by an attacker. Git uses external credential helper programs to store and retrieve     passwords or other credentials from secure storage provided by the operating system. Specially-crafted     URLs that contain an encoded newline can inject unintended values into the credential helper protocol     stream, causing the credential helper to retrieve the password for one server (e.g., good.example.com) for     an HTTP request being made to another server (e.g., evil.example.com), resulting in credentials for the     former being sent to the latter. There are no restrictions on the relationship between the two, meaning     that an attacker can craft a URL that will present stored credentials for any host to a host of their     choosing. The vulnerability can be triggered by feeding a malicious URL to git clone. However, the     affected URLs look rather suspicious; the likely vector would be through systems which automatically clone     URLs not visible to the user, such as Git submodules, or package systems built around Git. The problem has     been patched in the versions published on April 14th, 2020, going back to v2.17.x. Anyone wishing to     backport the change further can do so by applying commit 9a6bbee (the full release includes extra checks     for git fsck, but that commit is sufficient to protect clients against the vulnerability). The patched     versions are: 2.17.4, 2.18.3, 2.19.4, 2.20.3, 2.21.2, 2.22.3, 2.23.2, 2.24.2, 2.25.3, 2.26.1.

    CVE-2020-11008:
    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials     to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix     for that bug still left the door open for an exploit where _some_ credential is leaked (but the attacker     cannot control which one). Git uses external credential helper programs to store and retrieve passwords     or other credentials from secure storage provided by the operating system. Specially-crafted URLs that are     considered illegal as of the recently published Git versions can cause Git to send a blank pattern to     helpers, missing hostname and protocol fields. Many helpers will interpret this as matching _any_ URL, and     will return some unspecified stored password, leaking the password to an attacker's server. The     vulnerability can be triggered by feeding a malicious URL to `git clone`. However, the affected URLs look     rather suspicious; the likely vector would be through systems which automatically clone URLs not visible     to the user, such as Git submodules, or package systems built around Git. The root of the problem is in     Git itself, which should not be feeding blank input to helpers. However, the ability to exploit the     vulnerability in practice depends on which helpers are in use. Credential helpers which are known to     trigger the vulnerability: - Git's store helper - Git's cache helper - the osxkeychain helper that     ships in Git's contrib directory Credential helpers which are known to be safe even with vulnerable     versions of Git: - Git Credential Manager for Windows Any helper not in this list should be assumed to     trigger the vulnerability.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

在 git (執行速度快且可供擴充的分散式修訂版控制系統) 中發現數個弱點。

  - CVE-2019-1348 據報告，git fast-import 的 --export-marks 選項也透過 in-stream 命令功能 export-marks=... 受到影響，這可允許覆寫任意路徑。

  - CVE-2019-1387 發現對子模組名稱的驗證不夠嚴格，從而導致在執行遞迴複製時可透過執行遠端程式碼來發動極有針對性的攻擊。

  - CVE-2019-19604 Joern Schneeweisz 報告了一個弱點，其中子模組更新採用的遞回複製可在使用者未明確要求的情況下執行存放庫中的程式碼。「.gitmodules」現在不允許包含設定「submodule.<name>.update=!command」的項目。

此外，此更新可解決數個安全性問題，只有當 git 在 NTFS 檔案系統上作業時，這些問題才會造成影響 (CVE-2019-1349、CVE-2019-1352 和 CVE-2019-1353)。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2020: 0228 公告中提及的多個弱點影響。

  - git：透過 export-marks in-stream 命令功能的任意路徑覆寫 (CVE-2019-1348)

  - git：遞迴子模組複製允許使用 git 目錄兩次，並以 .git / 編寫同義目錄名稱 (CVE-2019-1349)

  - git：.git 目錄中的檔案在透過 NTFS 備用資料流複製期間可能會被覆寫 (CVE-2019-1352)

  - git：以巢狀子模組進行遞迴複製時，發生遠端程式碼執行 (CVE-2019-1387)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機受到 GLSA-202003-42 中所述的弱點影響 (libgit2：多個弱點)

    在 libgit2 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。
  影響：

    攻擊者可能覆寫任意路徑、執行任意程式碼並覆寫 .git 目錄中的檔案。
  因應措施：

    目前尚無已知的因應措施。

遠端 CentOS Linux 8 主機上安裝的套件受到 CESA-2019: 4356 公告中提及的多個弱點影響。

  - git：透過 export-marks in-stream 命令功能的任意路徑覆寫 (CVE-2019-1348)

  - git：遞迴子模組複製允許使用 git 目錄兩次，並以 .git / 編寫同義目錄名稱 (CVE-2019-1349)

  - git：.git 目錄中的檔案在透過 NTFS 備用資料流複製期間可能會被覆寫 (CVE-2019-1352)

  - git：以巢狀子模組進行遞迴複製時，發生遠端程式碼執行 (CVE-2019-1387)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

遠端主機上安裝的 git 版本為 2.23.1-0 之前版本。因此，會受到 ALAS2-2023-1943 公告中所提及的多個弱點影響。

  - 在 v2.24.1、v2.23.1、v2.22.2、v2.21.1、v2.20.2、v2.19.3、v2.18.2、v2.17.3、v2.16.6、v2.15.4 和 v2.14.6 之前版本的 Git 中發現一個問題。git fast-import 的 --export-marks 選項也可透過 in-stream 命令功能 export-marks=... 公開，並且它允許覆寫任意路徑。(CVE-2019-1348)

  - 當適用於 Visual Studio 的 Git 未正確清理輸入時，有一個遠端程式碼執行弱點，亦稱「Git for Visual Studio 遠端程式碼執行弱點」。此 CVE ID 有別於 CVE-2019-1350、CVE-2019-1352、CVE-2019-1354、CVE-2019-1387。(CVE-2019-1349)

  - 當適用於 Visual Studio 的 Git 未正確清理輸入時，有一個遠端程式碼執行弱點，亦稱「Git for Visual Studio 遠端程式碼執行弱點」。此 CVE ID 有別於 CVE-2019-1349、CVE-2019-1352、CVE-2019-1354、CVE-2019-1387。(CVE-2019-1350)

  - Git for Visual Studio 未正確處理虛擬磁碟路徑時，會產生竄改弱點，亦稱「Git for Visual Studio 竄改弱點」。(CVE-2019-1351)

  - Git for Visual Studio 未正確清理輸入時，會產生遠端程式碼執行弱點，亦稱「Git for Visual Studio 遠端程式碼執行弱點」。此 CVE ID 有別於 CVE-2019-1349、CVE-2019-1350、CVE-2019-1354、CVE-2019-1387。(CVE-2019-1352)

  - 已在 Git 2.24.1、2.23.1、2.22.2、2.21.1、2.20.2、2.19.3、2.18.2、2.17.3、2.16.6、2.15.4 和 2.14.6 更早版本中發現一個問題。在適用於 Linux 的 Windows 子系統 (亦稱 WSL) 中執行 Git，同時存取一般 Windows 磁碟機上的工作目錄時，沒有任何 NTFS 保護工具處於作用中狀態。
    (CVE-2019-1353)

  - 當適用於 Visual Studio 的 Git 未正確清理輸入時，有一個遠端程式碼執行弱點，亦稱「Git for Visual Studio 遠端程式碼執行弱點」。此 CVE ID 有別於 CVE-2019-1349、CVE-2019-1350、CVE-2019-1352、CVE-2019-1387。(CVE-2019-1354)

  - 在 Git v2.24.1 之前的版本、v2.23.1、v2.22.2、v2.21.1、v2.20.2、v2.19.3、v2.18.2、v2.17.3、v2.16.6、v2.15.4 和 v2.14.6 版中發現一個問題。遞回複製目前受到因子模組名稱驗證過於寬鬆造成的弱點影響，允許透過遞回複製中的遠端程式碼執行發動極有針對性的攻擊。(CVE-2019-1387)

  - 在 Git 2.20.2 之前的版本、2.21.1 之前的 2.21.x 版本、2.22.2 之前的 2.22.x 版本、2.23.1 之前的 2.23.x 版本以及 2.24.1 之前的 2.24.x 版本中，由於 git submodule update 作業可執行在惡意存放庫的 .gitmodules 檔案中找到的命令，因此可能產生任意命令執行弱點。(CVE-2019-19604)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 CentOS Linux 7 主機上安裝的套件受到 RHSA-2020:0124 公告中提及的弱點影響。

  - 在 Git v2.24.1 之前的版本、v2.23.1、v2.22.2、v2.21.1、v2.20.2、v2.19.3、v2.18.2、v2.17.3、v2.16.6、v2.15.4 和 v2.14.6 版中發現一個問題。遞回複製目前受到因子模組名稱驗證過於寬鬆造成的弱點影響，允許透過遞回複製中的遠端程式碼執行發動極有針對性的攻擊。(CVE-2019-1387)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 7 主機已安裝受到一個弱點影響的套件，如 RHSA-2020:0124 公告中所提及。

  - git：以巢狀子模組進行遞迴複製時，發生遠端程式碼執行 (CVE-2019-1387)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

執行 CORE 5.05 / MAIN 5.05 版的遠端 NewStart CGSL 主機上安裝的 git 套件受到多個弱點影響：

  - 在 Git v2.24.1 之前的版本、v2.23.1、v2.22.2、v2.21.1、v2.20.2、v2.19.3、v2.18.2、v2.17.3、v2.16.6、v2.15.4 和 v2.14.6 版中發現一個問題。遞回複製目前受到因子模組名稱驗證過於寬鬆造成的弱點影響，允許透過遞回複製中的遠端程式碼執行發動極有針對性的攻擊。(CVE-2019-1387)

  - 受影響的 Git 版本有一個弱點，可誘騙 Git 將私密憑證傳送至攻擊者控制的主機。Git 使用外部憑證協助程式來儲存和擷取作業系統提供的安全儲存中的密碼或其他憑證。包含編碼新行的特別建構 URL 可將非預定值插入憑證協助程式通訊協定資料流，造成憑證協助程式擷取一台伺服器 (例如 good.example.com) 的密碼，以向其他伺服器發出 HTTP 要求 (例如 evil.example.com)，進而導致將前者的憑證傳送至後者。對兩者之間的關係沒有限制，這表示攻擊者可以特製 URL，將所儲存的任何主機憑證提供給他們選擇的主機。藉由提供惡意 URL 至 git clone 可觸發此弱點。不過，受影響的 URL 看起來相當可疑；可能的途徑會是自動複製對使用者不可見的 URL 的系統 (例如 Git 子模組)，或是圍繞 Git 構建的套件系統。此問題已在 2020 年 4 月 14 日發佈的版本中得到修補，回溯至 v2.17.x 版本。希望進一步反向移植變更的所有使用者皆可套用 commit 9a6bbee  (完整版本包含對 git fsck 的額外檢查，但該 commit 足以保護用戶端不受此弱點影響)。修補的版本為：2.17.4、2.18.3、2.19.4、2.20.3、2.21.2、2.22.3、2.23.2、2.24.2、2.25.3、2.26.1。
    (CVE-2020-5260)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

ID	Name	Product	Family	Published	Updated	Severity
133281	RHEL 8 : git (RHSA-2020:0228)	Nessus	Red Hat Local Security Checks	1/28/2020	11/7/2024	high
134728	GLSA-202003-42 : libgit2: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	3/20/2020	3/21/2024	high
145577	CentOS 8 : git (CESA-2019:4356)	Nessus	CentOS Local Security Checks	1/29/2021	1/25/2024	high
171819	Amazon Linux 2 : git (ALAS-2023-1943)	Nessus	Amazon Linux Local Security Checks	2/23/2023	12/11/2024	critical
236541	Alibaba Cloud Linux 3 : 0109: git (ALINUX3-SA-2022:0109)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	high
131966	Debian DSA-4581-1：git - 安全性更新	Nessus	Debian Local Security Checks	12/12/2019	4/4/2024	critical
133281	RHEL 8：git (RHSA-2020: 0228)	Nessus	Red Hat Local Security Checks	1/28/2020	11/7/2024	high
134728	GLSA-202003-42：libgit2：多個弱點	Nessus	Gentoo Local Security Checks	3/20/2020	3/21/2024	high
145577	CentOS 8：git (CESA-2019: 4356)	Nessus	CentOS Local Security Checks	1/29/2021	1/25/2024	high
171819	Amazon Linux 2：git (ALAS-2023-1943)	Nessus	Amazon Linux Local Security Checks	2/23/2023	12/11/2024	critical
133100	CentOS 7：git (RHSA-2020:0124)	Nessus	CentOS Local Security Checks	1/21/2020	10/9/2024	high
133025	RHEL 7：git (RHSA-2020:0124)	Nessus	Red Hat Local Security Checks	1/17/2020	11/7/2024	high
143890	NewStart CGSL CORE 5.05 / MAIN 5.05：git 多個弱點 (NS-SA-2020-0113)	Nessus	NewStart CGSL Local Security Checks	12/9/2020	12/10/2020	high

Detections

Analytics

Plugins Search

high

high

high

critical

high

critical

high

high

high

critical

high

high

high