Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2277-1 advisory.

    - CVE-2024-32002: Fix recursive clones on case-insensitive filesystems that support symbolic links are     susceptible to case confusion. (bsc#1224168)
    - CVE-2024-32004: Fixed arbitrary code execution during local clones. (bsc#1224170)
    - CVE-2024-32020: Fix file overwriting vulnerability during local clones. (bsc#1224171)
    - CVE-2024-32021: Git may create hardlinks to arbitrary user-readable files. (bsc#1224172)
    - CVE-2024-32465: Fixed arbitrary code execution during clone operations. (bsc#1224173)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4084 advisory.

    * git: Recursive clones RCE (CVE-2024-32002)

    * git: RCE while cloning local repos (CVE-2024-32004)

    * git: additional local RCE (CVE-2024-32465)

    * git: insecure hardlinks (CVE-2024-32020)

    * git: symlink bypass (CVE-2024-32021)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4083 advisory.

    * git: Recursive clones RCE (CVE-2024-32002)

    * git: RCE while cloning local repos (CVE-2024-32004)

    * git: additional local RCE (CVE-2024-32465)

    * git: insecure hardlinks (CVE-2024-32020)

    * git: symlink bypass (CVE-2024-32021)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3844 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3844-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Sean Whitton     June 26, 2024                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : git     Version        : 1:2.20.1-2+deb10u9     CVE ID         : CVE-2019-1387 CVE-2023-25652 CVE-2023-25815 CVE-2023-29007                      CVE-2024-32002 CVE-2024-32004 CVE-2024-32021 CVE-2024-32465     Debian Bug     : 1034835 1071160

    Multiple vulnerabilities were found in git, a fast, scalable and     distributed revision control system.

    CVE-2019-1387

        It was possible to bypass the previous check for this vulnerability         using parallel cloning, or the --recurse-submodules option to         git-checkout(1).

    CVE-2023-25652

        Feeding specially-crafted input to 'git apply --reject' could         overwrite a path outside the working tree with partially controlled         contents, corresponding to the rejected hunk or hunks from the given         patch.

    CVE-2023-25815

        Low-privileged users could inject malicious messages into Git's         output under MINGW.

    CVE-2023-29007

        A specially-crafted .gitmodules file with submodule URLs longer than         1024 characters could be used to inject arbitrary configuration into         $GIT_DIR/config.

    CVE-2024-32002

        Repositories with submodules could be specially-crafted to write         hooks into .git/ which would then be executed during an ongoing         clone operation.

    CVE-2024-32004

        A specially-crafted local repository could cause the execution of         arbitrary code when cloned by another user.

    CVE-2024-32021

        When cloning a local repository that contains symlinks via the         filesystem, Git could have created hardlinks to arbitrary         user-readable files on the same filesystem as the target repository         in the objects/ directory.

    CVE-2024-32465

        When cloning a local repository obtained from a downloaded archive,         hooks in that repository could be used for arbitrary code execution.

    For Debian 10 buster, these problems have been fixed in version     1:2.20.1-2+deb10u9.

    We recommend that you upgrade your git packages.

    For the detailed security status of git please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/git

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4083 advisory.

    [2.43.5-1]
    - Update to 2.43.5
    - Related: RHEL-36402, RHEL-36414

    [2.43.4-1]
    - Update to 2.43.4
    - Resolves: RHEL-36402, RHEL-36414

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4084 advisory.

    [2.43.5-1]
    - Update to 2.43.5
    - Related: RHEL-36399, RHEL-36411

    [2.43.4-1]
    - Update to 2.43.4
    - Resolves: RHEL-36399, RHEL-36411

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4084 advisory.

    * git: Recursive clones RCE (CVE-2024-32002)
    * git: RCE while cloning local repos (CVE-2024-32004)
    * git: additional local RCE (CVE-2024-32465)
    * git: insecure hardlinks (CVE-2024-32020)
    * git: symlink bypass (CVE-2024-32021)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4083 advisory.

    * git: Recursive clones RCE (CVE-2024-32002)
    * git: RCE while cloning local repos (CVE-2024-32004)
    * git: additional local RCE (CVE-2024-32465)
    * git: insecure hardlinks (CVE-2024-32020)
    * git: symlink bypass (CVE-2024-32021)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4084 advisory.

    Git is a distributed revision control system with a decentralized architecture. As opposed to centralized     version control systems with a client-server model, Git ensures that each working copy of a Git repository     is an exact copy with complete revision history. This not only allows the user to work on and contribute     to projects without the need to have permission to push the changes to their official repositories, but     also makes it possible for the user to work with no network connection.

    Security Fix(es):

    * git: Recursive clones RCE (CVE-2024-32002)

    * git: RCE while cloning local repos (CVE-2024-32004)

    * git: additional local RCE (CVE-2024-32465)

    * git: insecure hardlinks (CVE-2024-32020)

    * git: symlink bypass (CVE-2024-32021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4083 advisory.

    Git is a distributed revision control system with a decentralized architecture. As opposed to centralized     version control systems with a client-server model, Git ensures that each working copy of a Git repository     is an exact copy with complete revision history. This not only allows the user to work on and contribute     to projects without the need to have permission to push the changes to their official repositories, but     also makes it possible for the user to work with no network connection.

    Security Fix(es):

    * git: Recursive clones RCE (CVE-2024-32002)

    * git: RCE while cloning local repos (CVE-2024-32004)

    * git: additional local RCE (CVE-2024-32465)

    * git: insecure hardlinks (CVE-2024-32020)

    * git: symlink bypass (CVE-2024-32021)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of git installed on the remote host is prior to 2.38.4-1.81. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2024-1939 advisory.

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be     fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows     writing a hook that will be executed while the clone operation is still running, giving the user no     opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1,     2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via     `git config --global core.symlinks false`), the described attack won't work. As always, it is best to     avoid cloning repositories from untrusted sources. (CVE-2024-32002)

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary     code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2,     2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
    (CVE-2024-32004)

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, local clones may end up hardlinking files into the target repository's object database when source     and target repository reside on the same disk. If the source repository is owned by a different user, then     those hardlinked files may be rewritten at any point in time by the untrusted user. Cloning local     repositories will cause Git to either copy or hardlink files of the source repository into the target     repository. This significantly speeds up such local clones compared to doing a proper clone and saves     both disk space and compute time. When cloning a repository located on the same disk that is owned by a     different user than the current user we also end up creating such hardlinks. These files will continue to     be owned and controlled by the potentially-untrusted user and can be rewritten by them at will in the     future. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4. (CVE-2024-32020)

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create     hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the     `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary     user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning     a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`),     the optimizations for local cloningwill be used, which include attempting to hard link the object files     instead of copying them. While the code includes checks against symbolic links in the source repository,     which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link     operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check,     and then a symlink during the operation, this will allow the adversary to bypass the check and create     hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been     patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. (CVE-2024-32021)

    Git is a revision control system. The Git project recommends to avoid working in untrusted repositories,     and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific     protections to make that a safe operation even with an untrusted source repository, but vulnerabilities     allow those protections to be bypassed. In the context of cloning local repositories owned by other users,     this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for     CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git     repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run     within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4,     2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been     obtained via archives from untrusted sources. (CVE-2024-32465)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of git installed on the remote host is prior to 2.40.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2548 advisory.

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be     fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows     writing a hook that will be executed while the clone operation is still running, giving the user no     opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1,     2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via     `git config --global core.symlinks false`), the described attack won't work. As always, it is best to     avoid cloning repositories from untrusted sources. (CVE-2024-32002)

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary     code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2,     2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
    (CVE-2024-32004)

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, local clones may end up hardlinking files into the target repository's object database when source     and target repository reside on the same disk. If the source repository is owned by a different user, then     those hardlinked files may be rewritten at any point in time by the untrusted user. Cloning local     repositories will cause Git to either copy or hardlink files of the source repository into the target     repository. This significantly speeds up such local clones compared to doing a proper clone and saves     both disk space and compute time. When cloning a repository located on the same disk that is owned by a     different user than the current user we also end up creating such hardlinks. These files will continue to     be owned and controlled by the potentially-untrusted user and can be rewritten by them at will in the     future. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4. (CVE-2024-32020)

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create     hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the     `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary     user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning     a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`),     the optimizations for local cloningwill be used, which include attempting to hard link the object files     instead of copying them. While the code includes checks against symbolic links in the source repository,     which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link     operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check,     and then a symlink during the operation, this will allow the adversary to bypass the check and create     hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been     patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. (CVE-2024-32021)

    Git is a revision control system. The Git project recommends to avoid working in untrusted repositories,     and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific     protections to make that a safe operation even with an untrusted source repository, but vulnerabilities     allow those protections to be bypassed. In the context of cloning local repositories owned by other users,     this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for     CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git     repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run     within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4,     2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been     obtained via archives from untrusted sources. (CVE-2024-32465)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1807-1 advisory.

    - CVE-2024-32002: Fixed recursive clones on case-insensitive filesystems that support symbolic links are     susceptible to case confusion (bsc#1224168).
    - CVE-2024-32004: Fixed arbitrary code execution during local clones (bsc#1224170).
    - CVE-2024-32020: Fixed file overwriting vulnerability during local clones (bsc#1224171).
    - CVE-2024-32021: Fixed git may create hardlinks to arbitrary user-readable files (bsc#1224172).
    - CVE-2024-32465: Fixed arbitrary code execution during clone operations (bsc#1224173).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6793-1 advisory.

    It was discovered that Git incorrectly handled certain submodules. An attacker could possibly use this     issue to execute arbitrary code. This issue was fixed in Ubuntu 22.04 LTS, Ubuntu 23.10 and Ubuntu 24.04     LTS. (CVE-2024-32002)

    It was discovered that Git incorrectly handled certain cloned repositories. An attacker could possibly use     this issue to execute arbitrary code. (CVE-2024-32004)

    It was discovered that Git incorrectly handled local clones with hardlinked files/directories. An attacker     could possibly use this issue to place a specialized repository on their target's local system.
    (CVE-2024-32020)

    It was discovered that Git incorrectly handled certain symlinks. An attacker could possibly use this issue     to impact availability and integrity creating hardlinked arbitrary files into users repository's     objects/directory. (CVE-2024-32021)

    It was discovered that Git incorrectly handled certain cloned repositories. An attacker could possibly use     this issue to execute arbitrary code. (CVE-2024-32465)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-623 advisory.

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be     fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows     writing a hook that will be executed while the clone operation is still running, giving the user no     opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1,     2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via     `git config --global core.symlinks false`), the described attack won't work. As always, it is best to     avoid cloning repositories from untrusted sources. (CVE-2024-32002)

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary     code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2,     2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
    (CVE-2024-32004)

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, local clones may end up hardlinking files into the target repository's object database when source     and target repository reside on the same disk. If the source repository is owned by a different user, then     those hardlinked files may be rewritten at any point in time by the untrusted user. Cloning local     repositories will cause Git to either copy or hardlink files of the source repository into the target     repository. This significantly speeds up such local clones compared to doing a proper clone and saves     both disk space and compute time. When cloning a repository located on the same disk that is owned by a     different user than the current user we also end up creating such hardlinks. These files will continue to     be owned and controlled by the potentially-untrusted user and can be rewritten by them at will in the     future. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4. (CVE-2024-32020)

    Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create     hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the     `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary     user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning     a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`),     the optimizations for local cloningwill be used, which include attempting to hard link the object files     instead of copying them. While the code includes checks against symbolic links in the source repository,     which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link     operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check,     and then a symlink during the operation, this will allow the adversary to bypass the check and create     hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been     patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. (CVE-2024-32021)

    Git is a revision control system. The Git project recommends to avoid working in untrusted repositories,     and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific     protections to make that a safe operation even with an untrusted source repository, but vulnerabilities     allow those protections to be bypassed. In the context of cloning local repositories owned by other users,     this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for     CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git     repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run     within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4,     2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been     obtained via archives from untrusted sources. (CVE-2024-32465)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including:

  - Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code     Execution. (CVE-2024-32002)

  - Remote Code Execution while cloning special-crafted local repositories. (CVE-2024-32004)

  - A Remote Code Execution vulnerability exists in .NET 7.0 and .NET 8.0 where a stack buffer overrun     occurs in .NET Double Parse routine. (CVE-2024-30045)

  - A Vulnerability exists in Microsoft.AspNetCore.Server.Kestrel.Core.dll where a dead-lock can occur     resulting in Denial of Service. (CVE-2024-30046)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ecba8476e2 advisory.

  - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be     fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows     writing a hook that will be executed while the clone operation is still running, giving the user no     opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1,     2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via     `git config --global core.symlinks false`), the described attack won't work. As always, it is best to     avoid cloning repositories from untrusted sources. (CVE-2024-32002)

  - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary     code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2,     2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
    (CVE-2024-32004)

  - Git is a revision control system. The Git project recommends to avoid working in untrusted repositories,     and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific     protections to make that a safe operation even with an untrusted source repository, but vulnerabilities     allow those protections to be bypassed. In the context of cloning local repositories owned by other users,     this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for     CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git     repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run     within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4,     2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been     obtained via archives from untrusted sources. (CVE-2024-32465)

  - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, local clones may end up hardlinking files into the target repository's object database when source     and target repository reside on the same disk. If the source repository is owned by a different user, then     those hardlinked files may be rewritten at any point in time by the untrusted user. Cloning local     repositories will cause Git to either copy or hardlink files of the source repository into the target     repository. This significantly speeds up such local clones compared to doing a proper clone and saves     both disk space and compute time. When cloning a repository located on the same disk that is owned by a     different user than the current user we also end up creating such hardlinks. These files will continue to     be owned and controlled by the potentially-untrusted user and can be rewritten by them at will in the     future. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4. (CVE-2024-32020)

  - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create     hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the     `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary     user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning     a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`),     the optimizations for local cloning will be used, which include attempting to hard link the object files     instead of copying them. While the code includes checks against symbolic links in the source repository,     which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link     operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check,     and then a symlink during the operation, this will allow the adversary to bypass the check and create     hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been     patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. (CVE-2024-32021)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of git installed on the remote host is prior to 2.39.4 / 2.45.1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-136-02 advisory.

  - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be     fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows     writing a hook that will be executed while the clone operation is still running, giving the user no     opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1,     2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via     `git config --global core.symlinks false`), the described attack won't work. As always, it is best to     avoid cloning repositories from untrusted sources. (CVE-2024-32002)

  - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary     code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2,     2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.
    (CVE-2024-32004)

  - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, local clones may end up hardlinking files into the target repository's object database when source     and target repository reside on the same disk. If the source repository is owned by a different user, then     those hardlinked files may be rewritten at any point in time by the untrusted user. Cloning local     repositories will cause Git to either copy or hardlink files of the source repository into the target     repository. This significantly speeds up such local clones compared to doing a proper clone and saves     both disk space and compute time. When cloning a repository located on the same disk that is owned by a     different user than the current user we also end up creating such hardlinks. These files will continue to     be owned and controlled by the potentially-untrusted user and can be rewritten by them at will in the     future. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4. (CVE-2024-32020)

  - Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and     2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create     hardlinks to arbitrary user-readable files on the same filesystem as the target repository in the     `objects/` directory. Cloning a local repository over the filesystem may creating hardlinks to arbitrary     user-owned files on the same filesystem in the target Git repository's `objects/` directory. When cloning     a repository over the filesystem (without explicitly specifying the `file://` protocol or `--no-local`),     the optimizations for local cloning will be used, which include attempting to hard link the object files     instead of copying them. While the code includes checks against symbolic links in the source repository,     which were added during the fix for CVE-2022-39253, these checks can still be raced because the hard link     operation ultimately follows symlinks. If the object on the filesystem appears as a file during the check,     and then a symlink during the operation, this will allow the adversary to bypass the check and create     hardlinks in the destination objects directory to arbitrary, user-readable files. The problem has been     patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. (CVE-2024-32021)

  - Git is a revision control system. The Git project recommends to avoid working in untrusted repositories,     and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific     protections to make that a safe operation even with an untrusted source repository, but vulnerabilities     allow those protections to be bypassed. In the context of cloning local repositories owned by other users,     this vulnerability has been covered in CVE-2024-32004. But there are circumstances where the fixes for     CVE-2024-32004 are not enough: For example, when obtaining a `.zip` file containing a full copy of a Git     repository, it should not be trusted by default to be safe, as e.g. hooks could be configured to run     within the context of that repository. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4,     2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid using Git in repositories that have been     obtained via archives from untrusted sources. (CVE-2024-32465)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
201321	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : git (SUSE-SU-2024:2277-1)	Nessus	SuSE Local Security Checks	critical
201246	Rocky Linux 8 : git (RLSA-2024:4084)	Nessus	Rocky Linux Local Security Checks	critical
201239	Rocky Linux 9 : git (RLSA-2024:4083)	Nessus	Rocky Linux Local Security Checks	critical
201038	Debian dla-3844 : git - security update	Nessus	Debian Local Security Checks	critical
201001	Oracle Linux 9 : git (ELSA-2024-4083)	Nessus	Oracle Linux Local Security Checks	critical
200998	Oracle Linux 8 : git (ELSA-2024-4084)	Nessus	Oracle Linux Local Security Checks	critical
200991	AlmaLinux 8 : git (ALSA-2024:4084)	Nessus	Alma Linux Local Security Checks	critical
200988	AlmaLinux 9 : git (ALSA-2024:4083)	Nessus	Alma Linux Local Security Checks	critical
200983	RHEL 8 : git (RHSA-2024:4084)	Nessus	Red Hat Local Security Checks	critical
200980	RHEL 9 : git (RHSA-2024:4083)	Nessus	Red Hat Local Security Checks	critical
200102	Amazon Linux AMI : git (ALAS-2024-1939)	Nessus	Amazon Linux Local Security Checks	critical
198267	Amazon Linux 2 : git (ALAS-2024-2548)	Nessus	Amazon Linux Local Security Checks	critical
198135	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : git (SUSE-SU-2024:1807-1)	Nessus	SuSE Local Security Checks	critical
198042	Ubuntu 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Git vulnerabilities (USN-6793-1)	Nessus	Ubuntu Local Security Checks	critical
197965	Amazon Linux 2023 : git, git-all, git-core (ALAS2023-2024-623)	Nessus	Amazon Linux Local Security Checks	critical
197296	Security Updates for Microsoft Visual Studio Products (May 2024)	Nessus	Windows : Microsoft Bulletins	critical
197291	Fedora 40 : git (2024-ecba8476e2)	Nessus	Fedora Local Security Checks	critical
197168	Slackware Linux 15.0 / current git Multiple Vulnerabilities (SSA:2024-136-02)	Nessus	Slackware Local Security Checks	critical

Detections

Analytics

CVE-2024-32004

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical