GCVE-110-MAGEIA-2018-395

Advisory Published

Vulnetix · Advisory published October 14, 2018

joernchen of Phenoelit discovered that git is prone to an arbitrary code execution vulnerability due to insufficient validation of submodule url and path via a specially crafted .gitmodules file in a project cloned with --recurse-submodules (CVE-2018-17456).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	git	0 (affected), 2.13.7-1.2.mga6 (unaffected)	—

References

Updated git packages fix security vulnerability

advisory

Updated git packages fix security vulnerability

issue

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON