The version of Atlassian SourceTree installed on the remote Windows host is version 0.5a prior to 3.0.17. It is, therefore, affected by multiple remote code execution vulnerabilities.

  - An option injection vulnerability exists in the git submodule   component. An unauthenticated, remote attacker can exploit this via   the processing of a recursive git clone of a project with a   specially crafted .gitmodules file, to execute arbitrary commands.
  (CVE-2018-17456)

  - An argument injection vulnerability exists in the Mercurial   repository component. An authenticated, remote attacker can exploit   this via filenames in the Mercurial repositories to execute   arbitrary commands. (CVE-2018-20234, CVE-2018-20235)

  - A command injection vulnerability exists in the URI handling   component. An unauthenticated, remote attacker could exploit this   via sending a malicious URI to a victim to execution arbitrary   commands. (CVE-2018-20236)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for libgit2 fixes the following issues :

Security issue fixed :

  - CVE-2018-17456: Submodule URLs and paths with a leading     '-' are now ignored to avoid injecting options into     library consumers that perform recursive clones     (bsc#1110949).

Non-security issues fixed :

  - Version update to version 0.26.8 (bsc#1114729).

  - Full changelog can be found at :

  - https://github.com/libgit2/libgit2/releases/tag/v0.26.8

  - https://github.com/libgit2/libgit2/releases/tag/v0.26.7

This update was imported from the SUSE:SLE-15:Update update project.

It was discovered that git did not properly validate git submodule urls or paths. A remote attacker could possibly use this to craft a git repository that causes arbitrary code execution when recursive operations are used.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Git before 2.14.5, allows remote code execution during processing of a recursive 'git clone' of a superproject if a .gitmodules file has a URL field beginning with a '-' character.(CVE-2018-17456)

This update for git fixes the following issues :

CVE-2018-17456: Git allowed remote code execution during processing of a recursive 'git clone' of a superproject if a .gitmodules file has a URL field beginning with a '-' character. (boo#1110949).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libgit2 fixes the following issues :

Security issue fixed :

CVE-2018-17456: Submodule URLs and paths with a leading '-' are now ignored to avoid injecting options into library consumers that perform recursive clones (bsc#1110949).

Non-security issues fixed: Version update to version 0.26.8 (bsc#1114729).

Full changelog can be found at :

  - https://github.com/libgit2/libgit2/releases/tag/v0.26.8

  - https://github.com/libgit2/libgit2/releases/tag/v0.26.7

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Upstream security update resolving an issue with `git clone
--recurse-submodules`.

From the [upstream release announcement](https://public-inbox.org/git/xmqqy3bcuy3l.fsf@gitster-ct .c.googlers.com/) :

> These releases fix a security flaw (CVE-2018-17456), which allowed an > attacker to execute arbitrary code by crafting a malicious .gitmodules > file in a project cloned with --recurse-submodules. > > When running 'git clone --recurse-submodules', Git parses the supplied > .gitmodules file for a URL field and blindly passes it as an argument > to a 'git clone' subprocess. If the URL field is set to a string that > begins with a dash, this 'git clone' subprocess interprets the URL as > an option. This can lead to executing an arbitrary script shipped in > the superproject as the user who ran 'git clone'. > > In addition to fixing the security issue for the user running 'clone', > the 2.17.2, 2.18.1 and 2.19.1 releases have an 'fsck' check which can > be used to detect such malicious repository content when fetching or > accepting a push. See 'transfer.fsckObjects' in git-config(1). > > Credit for finding and fixing this vulnerability goes to joernchen > and Jeff King, respectively.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - git: arbitrary code execution via .gitmodules     (CVE-2018-17456)

According to the version of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - git: arbitrary code execution via .gitmodules     (CVE-2018-17456)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
122854	Atlassian SourceTree 0.5a < 3.0.17 Multiple remote code execution vulnerabilities	Nessus	Windows	3/14/2019	5/23/2022	critical
123403	openSUSE Security Update : libgit2 (openSUSE-2019-986)	Nessus	SuSE Local Security Checks	3/27/2019	6/7/2024	critical
118083	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Git vulnerability (USN-3791-1)	Nessus	Ubuntu Local Security Checks	10/12/2018	10/20/2023	critical
118400	Amazon Linux 2 : git (ALAS-2018-1093)	Nessus	Amazon Linux Local Security Checks	10/26/2018	4/5/2019	critical
120129	SUSE SLED15 / SLES15 Security Update : git (SUSE-SU-2018:3150-1)	Nessus	SuSE Local Security Checks	1/2/2019	1/13/2021	critical
120182	SUSE SLED15 / SLES15 Security Update : libgit2 (SUSE-SU-2018:4009-1)	Nessus	SuSE Local Security Checks	1/2/2019	9/10/2019	critical
120213	Fedora 29 : git (2018-06090dff59)	Nessus	Fedora Local Security Checks	1/3/2019	1/6/2021	critical
119206	Scientific Linux Security Update : git on SL7.x x86_64 (20181031)	Nessus	Scientific Linux Local Security Checks	11/27/2018	2/24/2020	critical
119516	EulerOS 2.0 SP3 : git (EulerOS-SA-2018-1388)	Nessus	Huawei Local Security Checks	12/10/2018	1/6/2021	critical
133447	Scientific Linux Security Update : git on SL6.x i386/x86_64 (20200203)	Nessus	Scientific Linux Local Security Checks	2/4/2020	3/28/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical