CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-17456

Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.706

EPSS Ranking 98.6%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-17456

Git-Scm » Git » Version: 2.14.0

cpe:2.3:a:git-scm:git:2.14.0
Git-Scm » Git » Version: 2.14.1

cpe:2.3:a:git-scm:git:2.14.1
Git-Scm » Git » Version: 2.14.2

cpe:2.3:a:git-scm:git:2.14.2
Git-Scm » Git » Version: 2.14.3

cpe:2.3:a:git-scm:git:2.14.3
Git-Scm » Git » Version: 2.14.4

cpe:2.3:a:git-scm:git:2.14.4
Git-Scm » Git » Version: 2.15.0

cpe:2.3:a:git-scm:git:2.15.0
Git-Scm » Git » Version: 2.15.1

cpe:2.3:a:git-scm:git:2.15.1
Git-Scm » Git » Version: 2.15.2

cpe:2.3:a:git-scm:git:2.15.2
Git-Scm » Git » Version: 2.16.0

cpe:2.3:a:git-scm:git:2.16.0
Git-Scm » Git » Version: 2.16.1

cpe:2.3:a:git-scm:git:2.16.1
Git-Scm » Git » Version: 2.16.2

cpe:2.3:a:git-scm:git:2.16.2
Git-Scm » Git » Version: 2.16.3

cpe:2.3:a:git-scm:git:2.16.3
Git-Scm » Git » Version: 2.16.4

cpe:2.3:a:git-scm:git:2.16.4
Git-Scm » Git » Version: 2.17.0

cpe:2.3:a:git-scm:git:2.17.0
Git-Scm » Git » Version: 2.17.1

cpe:2.3:a:git-scm:git:2.17.1
Git-Scm » Git » Version: 2.18.0

cpe:2.3:a:git-scm:git:2.18.0
Git-Scm » Git » Version: 2.19.0

cpe:2.3:a:git-scm:git:2.19.0
Redhat » Ansible Tower » Version: 3.3

cpe:2.3:a:redhat:ansible_tower:3.3
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 6.7

cpe:2.3:o:redhat:enterprise_linux:6.7
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux:7.3
Redhat » Enterprise Linux » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux:7.4
Redhat » Enterprise Linux » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux:7.5
Redhat » Enterprise Linux » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux:7.6
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-17456

Products

Pricing

Contact Us