VDB
CVE-2022-31012
CVE-2022-31012
PUBLISHED
Es existiert eine Schwachstelle in git. Der Fehler besteht in der unerwünschten Ausführung einer Binärdatei, die in C:\mingw64\bin\git.exe abgelegt ist. Ein lokaler Angreifer kann diese Schwachstelle zur Ausführung von beliebigem Code ausnutzen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
EPSS 0.08% · 24.3th percentile
Risk Scores
EPSS Score
0.08%
24.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gentoo | Gentoo Linux | |
| SUSE | SUSE Linux | |
| Amazon | Amazon Linux 2 | |
| Debian | Debian Linux | |
| Ubuntu | Ubuntu Linux | |
| Red Hat | Red Hat Enterprise Linux | |
| Apple | Apple Xcode < 14.1 |
Exploit Intelligence
Timeline
- Jul 12, 2022 CVE Published
- Jul 13, 2022 EPSS Score
- Aug 30, 2022 EPSS Score
- Oct 16, 2022 EPSS Score
- Dec 2, 2022 EPSS Score
- Jan 18, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 23, 2023 EPSS Score
- Jun 9, 2023 EPSS Score
- Jul 26, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
- Oct 28, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-0664.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0664 advisory
- https://github.com/git/git/security/advisories/GHSA-j342-m5hw-rr3v advisory
- https://github.com/git-for-windows/git/security/advisories/GHSA-gjrj-fxvp-hjj2 advisory
- https://ubuntu.com/security/notices/USN-5511-1 advisory
- https://alas.aws.amazon.com/AL2/ALAS-2022-1820.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-July/011633.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-July/011634.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-July/011656.html advisory
- https://alas.aws.amazon.com/AL2022/ALAS-2022-118.html advisory
- https://alas.aws.amazon.com/ALAS-2022-1623.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-September/012252.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-October/012486.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2022-October/012490.html advisory
- https://support.apple.com/kb/HT213496 advisory
- https://alas.aws.amazon.com/AL2022/ALAS-2022-236.html advisory
- https://lists.debian.org/debian-security-announce/2023/msg00022.html advisory
- https://access.redhat.com/errata/RHSA-2023:2319 advisory
- https://access.redhat.com/errata/RHSA-2023:2859 advisory
- https://security.gentoo.org/glsa/202312-15 advisory
…and 2 more