Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.882913
Category:CentOS Local Security Checks
Title:CentOS Update for emacs-git CESA-2018:1957 centos7
Summary:Check the version of emacs-git
Description:Summary:
Check the version of emacs-git

Vulnerability Insight:
Git is a distributed revision control system with a decentralized
architecture. As opposed to centralized version control systems with a
client-server model, Git ensures that each working copy of a Git repository
is an exact copy with complete revision history. This not only allows the
user to work on and contribute to projects without the need to have
permission to push the changes to their official repositories, but also
makes it possible for the user to work with no network connection.

Security Fix(es):

* git: arbitrary code execution when recursively cloning a malicious
repository (CVE-2018-11235)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Affected Software/OS:
emacs-git on CentOS 7

Solution:
Please install the updated packages.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2018-11235
BugTraq ID: 104345
http://www.securityfocus.com/bid/104345
Debian Security Information: DSA-4212 (Google Search)
https://www.debian.org/security/2018/dsa-4212
https://www.exploit-db.com/exploits/44822/
https://security.gentoo.org/glsa/201805-13
https://blogs.msdn.microsoft.com/devops/2018/05/29/announcing-the-may-2018-git-security-vulnerability/
https://marc.info/?l=git&m=152761328506724&w=2
RedHat Security Advisories: RHSA-2018:1957
https://access.redhat.com/errata/RHSA-2018:1957
RedHat Security Advisories: RHSA-2018:2147
https://access.redhat.com/errata/RHSA-2018:2147
http://www.securitytracker.com/id/1040991
SuSE Security Announcement: openSUSE-SU-2020:0598 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html
https://usn.ubuntu.com/3671-1/
CopyrightCopyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.