The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0107 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2023-22490:
      A vulnerability was found in Git. Using a specially-crafted repository, Git can be tricked into using     its local clone optimization even when using a non-local transport. Though Git will abort local clones     whose source $GIT_DIR/objects directory contains symbolic links (CVE-2022-39253), the objects directory     may still be a symbolic link.
      CVE-2023-23946:
      A vulnerability was found in Git. This security issue occurs when feeding a crafted input to git     apply. A path outside the working tree can be overwritten by the user running git apply.
      CVE-2023-25652:
      A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to git     apply --reject; a path outside the working tree can be overwritten with partially controlled contents     corresponding to the rejected hunk(s) from the given patch.
      CVE-2023-25815:
      A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix     support and runs without translated messages, and it still uses the gettext machinery to display messages,     which subsequently looks for translated messages in unexpected places. This flaw allows the malicious     placement of crafted messages.
      CVE-2023-29007:
      A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a     configuration file, where certain malicious configuration values may be misinterpreted as the beginning of     a new configuration section. This flaw leads to arbitrary configuration injection.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0418-1 advisory.

  - Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5,     2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a     malicious actor. When performing a local clone (where the source and target of the clone are on the same     volume), Git copies the contents of the source's `$GIT_DIR/objects` directory into the destination by     either creating hardlinks to the source contents, or copying them (if hardlinks are disabled via `--no-     hardlinks`). A malicious actor could convince a victim to clone a repository with a symbolic link pointing     at sensitive information on the victim's machine. This can be done either by having the victim clone a     malicious repository on the same machine, or having them clone a malicious repository embedded as a bare     repository via a submodule from any source, provided they clone with the `--recurse-submodules` option.
    Git does not create symbolic links in the `$GIT_DIR/objects` directory. The problem has been patched in     the versions published on 2022-10-18, and backported to v2.30.x. Potential workarounds: Avoid cloning     untrusted repositories using the `--local` optimization when on a shared machine, either by passing the     `--no-local` option to `git clone` or cloning from a URL that uses the `file://` scheme. Alternatively,     avoid cloning repositories from untrusted sources with `--recurse-submodules` or run `git config --global     protocol.file.allow user`. (CVE-2022-39253)

  - Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login     shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6,     2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4, the function that splits the command arguments     into an array improperly uses an `int` to represent the number of entries in the array, allowing a     malicious actor to intentionally overflow the return value, leading to arbitrary heap writes. Because the     resulting array is then passed to `execv()`, it is possible to leverage this attack to gain remote code     execution on a victim machine. Note that a victim must first allow access to `git shell` as a login shell     in order to be vulnerable to this attack. This problem is patched in versions 2.30.6, 2.31.5, 2.32.4,     2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 and users are advised to upgrade to the latest version.
    Disabling `git shell` access via remote logins is a viable short-term workaround. (CVE-2022-39260)

  - Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2,     2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its     local clone optimization even when using a non-local transport. Though Git will abort local clones whose     source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a     symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's     filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar     manner as CVE-2022-39253. A fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5     v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term     workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`.
    Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git     submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it     does not contain suspicious module URLs. (CVE-2023-22490)

  - Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6,     2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a     path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been     prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6,     v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid     applying one that creates a symbolic link and then creates a file beyond the symbolic link.
    (CVE-2023-23946)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3338 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3338-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     February 23, 2023                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : git     Version        : 1:2.20.1-2+deb10u8     CVE ID         : CVE-2023-22490 CVE-2023-23946

    Several vulnerabilities have been discovered in git, a fast, scalable     and distributed revision control system.

    CVE-2023-22490

        yvvdwf found a data exfiltration vulnerability while performing a local         clone from a malicious repository even using a non-local transport.

    CVE-2023-23946

        Joern Schneeweisz found a path traversal vulnerbility in git-apply         that a path outside the working tree can be overwritten as the acting         user.

    For Debian 10 buster, these problems have been fixed in version     1:2.20.1-2+deb10u8.

    We recommend that you upgrade your git packages.

    For the detailed security status of git please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/git

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2,     2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its     local clone optimization even when using a non-local transport. Though Git will abort local clones whose     source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a     symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's     filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar     manner as CVE-2022-39253. A fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5     v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term     workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`.
    Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git     submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it     does not contain suspicious module URLs. (CVE-2023-22490)

  - Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6,     2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a     path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been     prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6,     v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid     applying one that creates a symbolic link and then creates a file beyond the symbolic link.
    (CVE-2023-23946)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the git packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for     paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains     a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing     gitattributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge     number of attributes for a single pattern, or when the declared attribute names are huge. These overflows     can be triggered via a crafted `.gitattributes` file that may be part of the commit history. Git silently     splits lines longer than 2KB when parsing gitattributes from a file, but not when parsing them from the     index. Consequentially, the failure mode depends on whether the file exists in the working tree, the index     or both. This integer overflow can result in arbitrary heap reads and writes, which may result in remote     code execution. The problem has been patched in the versions published on 2023-01-17, going back to     v2.30.7. Users are advised to upgrade. There are no known workarounds for this issue. (CVE-2022-23521)

  - Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5,     2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a     malicious actor. When performing a local clone (where the source and target of the clone are on the same     volume), Git copies the contents of the source's `$GIT_DIR/objects` directory into the destination by     either creating hardlinks to the source contents, or copying them (if hardlinks are disabled via `--no-     hardlinks`). A malicious actor could convince a victim to clone a repository with a symbolic link pointing     at sensitive information on the victim's machine. This can be done either by having the victim clone a     malicious repository on the same machine, or having them clone a malicious repository embedded as a bare     repository via a submodule from any source, provided they clone with the `--recurse-submodules` option.
    Git does not create symbolic links in the `$GIT_DIR/objects` directory. The problem has been patched in     the versions published on 2022-10-18, and backported to v2.30.x. Potential workarounds: Avoid cloning     untrusted repositories using the `--local` optimization when on a shared machine, either by passing the     `--no-local` option to `git clone` or cloning from a URL that uses the `file://` scheme. Alternatively,     avoid cloning repositories from untrusted sources with `--recurse-submodules` or run `git config --global     protocol.file.allow user`. (CVE-2022-39253)

  - Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login     shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6,     2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4, the function that splits the command arguments     into an array improperly uses an `int` to represent the number of entries in the array, allowing a     malicious actor to intentionally overflow the return value, leading to arbitrary heap writes. Because the     resulting array is then passed to `execv()`, it is possible to leverage this attack to gain remote code     execution on a victim machine. Note that a victim must first allow access to `git shell` as a login shell     in order to be vulnerable to this attack. This problem is patched in versions 2.30.6, 2.31.5, 2.32.4,     2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 and users are advised to upgrade to the latest version.
    Disabling `git shell` access via remote logins is a viable short-term workaround. (CVE-2022-39260)

  - Git is distributed revision control system. `git log` can display commits in an arbitrary format using its     `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst`     gitattribute. When processing the padding operators, there is a integer overflow in     `pretty.c::format_and_pad_commit()` where a `size_t` is stored improperly as an `int`, and then added as     an offset to a `memcpy()`. This overflow can be triggered directly by a user running a command which     invokes the commit formatting machinery (e.g., `git log --format=...`). It may also be triggered     indirectly through git archive via the export-subst mechanism, which expands format specifiers inside of     files within the repository during a git archive. This integer overflow can result in arbitrary heap     writes, which may result in arbitrary code execution. The problem has been patched in the versions     published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. Users who are unable to     upgrade should disable `git archive` in untrusted repositories. If you expose git archive via `git     daemon`, disable it by running `git config --global daemon.uploadArch false`. (CVE-2022-41903)

  - Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2,     2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its     local clone optimization even when using a non-local transport. Though Git will abort local clones whose     source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a     symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's     filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar     manner as CVE-2022-39253. A fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5     v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term     workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`.
    Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git     submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it     does not contain suspicious module URLs. (CVE-2023-22490)

  - Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6,     2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a     path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been     prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6,     v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid     applying one that creates a symbolic link and then creates a file beyond the symbolic link.
    (CVE-2023-23946)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0407 advisory.

    Git is a distributed revision control system with a decentralized architecture. As opposed to centralized     version control systems with a client-server model, Git ensures that each working copy of a Git repository     is an exact copy with complete revision history. This not only allows the user to work on and contribute     to projects without the need to have permission to push the changes to their official repositories, but     also makes it possible for the user to work with no network connection.

    Security Fix(es):

    * git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree     (CVE-2022-24765)

    * git: Bypass of safe.directory protections (CVE-2022-29187)

    * git: exposure of sensitive information to a malicious actor (CVE-2022-39253)

    * git: git shell function that splits command arguments can lead to arbitrary heap writes.
    (CVE-2022-39260)

    * git: data exfiltration with maliciously crafted repository (CVE-2023-22490)

    * git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5963:09 advisory.

    * git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be     overwritten with partially controlled contents (CVE-2023-25652)
      * git: arbitrary configuration injection when renaming or deleting a section from a configuration file     (CVE-2023-29007)
      * git: data exfiltration with maliciously crafted repository (CVE-2023-22490)
      * git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)
      * git: malicious placement of crafted messages when git was compiled with runtime prefix     (CVE-2023-25815)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5b372318ff advisory.

    Update to 2.39.2 (CVE-2023-22490, CVE-2023-23946)

    Refer to the [upstream release     notes](https://github.com/git/git/raw/v2.39.2/Documentation/RelNotes/2.30.8.txt) and the security     advisories ([CVE-2023-22490](https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q),     [CVE-2023-23946](https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh)) for details.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0430-1 advisory.

  - Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2,     2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its     local clone optimization even when using a non-local transport. Though Git will abort local clones whose     source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a     symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's     filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar     manner as CVE-2022-39253. A fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5     v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term     workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`.
    Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git     submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it     does not contain suspicious module URLs. (CVE-2023-22490)

  - Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6,     2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a     path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been     prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6,     v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid     applying one that creates a symbolic link and then creates a file beyond the symbolic link.
    (CVE-2023-23946)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of GitLab installed on the remote host is affected by a vulnerability, as follows:

  - Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2,     2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its     local clone optimization even when using a non-local transport. Though Git will abort local clones whose     source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a     symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's     filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar     manner as CVE-2022-39253. A fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5     v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term     workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`.
    Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git     submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it     does not contain suspicious module URLs. (CVE-2023-22490)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:3245 advisory.

  - Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2,     2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its     local clone optimization even when using a non-local transport. Though Git will abort local clones whose     source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a     symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's     filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar     manner as CVE-2022-39253. A fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5     v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term     workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`.
    Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git     submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it     does not contain suspicious module URLs. (CVE-2023-22490)

  - Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6,     2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a     path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been     prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6,     v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid     applying one that creates a symbolic link and then creates a file beyond the symbolic link.
    (CVE-2023-23946)

  - Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8,     2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a     path outside the working tree can be overwritten with partially controlled contents (corresponding to the     rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8,     2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with     `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch     before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file     exists. (CVE-2023-25652)

  - In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a     consequence, Git is expected not to localize messages at all, and skips the gettext initialization.
    However, due to a change in MINGW-packages, the `gettext()` function's implicit initialization no longer     uses the runtime prefix but uses the hard-coded path `C:\mingw64\share\locale` to look for localized     messages. And since any authenticated user has the permission to create folders in `C:\` (and since     `C:\mingw64` does not typically exist), it is possible for low-privilege users to place fake messages in     that location where `git.exe` will pick them up in version 2.40.1. This vulnerability is relatively hard     to exploit and requires social engineering. For example, a legitimate message at the end of a clone could     be maliciously modified to ask the user to direct their web browser to a malicious website, and the user     might think that the message comes from Git and is legitimate. It does require local write access by the     attacker, though, which makes this attack vector less likely. Version 2.40.1 contains a patch for this     issue. Some workarounds are available. Do not work on a Windows machine with shared accounts, or     alternatively create a `C:\mingw64` folder and leave it empty. Users who have administrative rights may     remove the permission to create folders in `C:\`. (CVE-2023-25815)

  - Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8,     2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs     that are longer than 1024 characters can used to exploit a bug in     `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary     configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section     associated with that submodule. When the attacker injects configuration values which specify executables     to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code     execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6,     2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted     repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`. (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3246 advisory.

  - Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2,     2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its     local clone optimization even when using a non-local transport. Though Git will abort local clones whose     source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a     symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's     filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar     manner as CVE-2022-39253. A fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5     v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term     workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`.
    Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git     submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it     does not contain suspicious module URLs. (CVE-2023-22490)

  - Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6,     2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a     path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been     prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6,     v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid     applying one that creates a symbolic link and then creates a file beyond the symbolic link.
    (CVE-2023-23946)

  - Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8,     2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a     path outside the working tree can be overwritten with partially controlled contents (corresponding to the     rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8,     2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with     `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch     before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file     exists. (CVE-2023-25652)

  - In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a     consequence, Git is expected not to localize messages at all, and skips the gettext initialization.
    However, due to a change in MINGW-packages, the `gettext()` function's implicit initialization no longer     uses the runtime prefix but uses the hard-coded path `C:\mingw64\share\locale` to look for localized     messages. And since any authenticated user has the permission to create folders in `C:\` (and since     `C:\mingw64` does not typically exist), it is possible for low-privilege users to place fake messages in     that location where `git.exe` will pick them up in version 2.40.1. This vulnerability is relatively hard     to exploit and requires social engineering. For example, a legitimate message at the end of a clone could     be maliciously modified to ask the user to direct their web browser to a malicious website, and the user     might think that the message comes from Git and is legitimate. It does require local write access by the     attacker, though, which makes this attack vector less likely. Version 2.40.1 contains a patch for this     issue. Some workarounds are available. Do not work on a Windows machine with shared accounts, or     alternatively create a `C:\mingw64` folder and leave it empty. Users who have administrative rights may     remove the permission to create folders in `C:\`. (CVE-2023-25815)

  - Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8,     2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs     that are longer than 1024 characters can used to exploit a bug in     `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary     configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section     associated with that submodule. When the attacker injects configuration values which specify executables     to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code     execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6,     2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted     repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`. (CVE-2023-29007)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
239563	TencentOS Server 3: git (TSSA-2023:0107)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
171526	SUSE SLES15 Security Update : git (SUSE-SU-2023:0418-1)	Nessus	SuSE Local Security Checks	2023/2/16	2023/9/11	high
171870	Debian dla-3338 : git - security update	Nessus	Debian Local Security Checks	2023/2/24	2025/1/22	high
175498	EulerOS 2.0 SP9 : git (EulerOS-SA-2023-1866)	Nessus	Huawei Local Security Checks	2023/5/13	2023/9/11	high
176005	EulerOS 2.0 SP10 : git (EulerOS-SA-2023-1951)	Nessus	Huawei Local Security Checks	2023/5/18	2023/9/11	high
177976	EulerOS 2.0 SP11 : git (EulerOS-SA-2023-2289)	Nessus	Huawei Local Security Checks	2023/7/4	2023/9/11	high
178857	EulerOS Virtualization 3.0.6.6 : git (EulerOS-SA-2023-2424)	Nessus	Huawei Local Security Checks	2023/7/26	2023/9/11	critical
189543	RHEL 8 : git (RHSA-2024:0407)	Nessus	Red Hat Local Security Checks	2024/1/25	2024/11/7	high
292379	MiracleLinux 9 : git-2.39.3-1.el9 (AXSA:2023-5963:09)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
171519	Fedora 37 : git (2023-5b372318ff)	Nessus	Fedora Local Security Checks	2023/2/15	2024/11/14	high
171531	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : git (SUSE-SU-2023:0430-1)	Nessus	SuSE Local Security Checks	2023/2/16	2023/9/11	high
171884	GitLab 0.0 < 15.6.8 / 15.7 < 15.7.7 / 15.8 < 15.8.2 (CVE-2023-22490)	Nessus	CGI abuses	2023/2/24	2024/1/3	medium
176234	AlmaLinux 9 : git (ALSA-2023:3245)	Nessus	Alma Linux Local Security Checks	2023/5/23	2023/5/24	high
176386	Rocky Linux 8 : git (RLSA-2023:3246)	Nessus	Rocky Linux Local Security Checks	2023/5/25	2023/5/25	high

检测

插件搜索

high

high

high

high

high

high

critical

high

high

high

high

medium

high

high