Vulnetix
Try Vulnetix Request Demo
CVE-2018-1000021 PUBLISHED

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

EPSS 0.37% · 58.8th percentile

Risk Scores

EPSS Score
0.37%
58.8th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:20.04:LTSgit1:2.25.0-1ubuntu1, 1:2.25.1-1ubuntu3.1, 1:2.25.1-1ubuntu3
Ubuntu:24.04:LTSgit1:2.43.0-1ubuntu6, 1:2.43.0-1ubuntu1, 1:2.40.1-1ubuntu1
Ubuntu:Pro:18.04:LTSgit1:2.17.1-1ubuntu0.18+esm4, 0, 1:2.14.1-1ubuntu4
Ubuntu:22.04:LTSgit1:2.34.1-1ubuntu1.13, 0, 1:2.32.0-1ubuntu1
Ubuntu:Pro:16.04:LTSgit1:2.7.4-0ubuntu1.3, 1:2.7.4-0ubuntu1.2, 1:2.7.4-0ubuntu1

Timeline

References

Open in Interactive Console →