The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5686-1 advisory.

    Cory Snider discovered that Git incorrectly handled certain symbolic links. An attacker could possibly use     this issue to cause an unexpected behaviour. (CVE-2022-39253)

    Kevin Backhouse discovered that Git incorrectly handled certain command strings. An attacker could     possibly use this issue to arbitrary code execution. (CVE-2022-39260)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Git vulnerabilities (USN-5686-1)

high Nessus Plugin ID 166262

Version 1.7

Version 1.6

Version 1.5

Version 1.5

Version 1.4

Version 1.3

Version 1.2

Version 1.7 Aug 29, 2024, 4:23 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408291623
Version 1.6 Jul 11, 2023, 4:01 AM Detection Plugin Feed: 202307110401
Version 1.5 Jan 18, 2023, 9:01 AM Logic Changes (Added support for s390x) Plugin Feed: 202301180901
Version 1.5 Jul 11, 2023, 1:48 AM Detection Plugin Feed: 202307110148
Version 1.4 Nov 28, 2022, 4:23 PM CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSS metrics ("CVSSv2 score" changed from "7.5" to "10.0") Plugin Feed: 202211281623
Version 1.3 Oct 24, 2022, 4:14 PM CVSSv3 score source (Changed from None to CVE-2022-39260) CVSS metrics Plugin Feed: 202210241614
Version 1.2 Oct 19, 2022, 11:54 PM New Plugin Feed: 202210192354