CVE-2010-2542: Buffer Overflow
First published: Mon Jul 26 2010(Updated: )
A buffer overrun was found in the way Git sanitized path of a git directory. If a local attacker would create a specially-crafted working copy and trick the local user into running any git command, it could lead to arbitrary code execution with the privileges of the user running the Git command. References: [1] <a href="http://seclists.org/oss-sec/2010/q3/93">http://seclists.org/oss-sec/2010/q3/93</a> [2] <a class="bz_bug_link bz_status_CLOSED bz_closed bz_public " title="CLOSED ERRATA - git-core: upstream fix for buffer overrun (CVE-2010-2542)" href="show_bug.cgi?id=617422">https://bugzilla.redhat.com/show_bug.cgi?id=617422</a> Upstream patches: [3] <a href="http://git.kernel.org/?p=git/git.git;a=commitdiff;h=3c9d0414ed2db0167e6c828b547be8fc9f88fccc;hp=c173dad58787a7f11a526dbcdaa5a2fe9ff1c87f">http://git.kernel.org/?p=git/git.git;a=commitdiff;h=3c9d0414ed2db0167e6c828b547be8fc9f88fccc;hp=c173dad58787a7f11a526dbcdaa5a2fe9ff1c87f</a> [4] <a href="http://git.kernel.org/?p=git/git.git;a=commitdiff;h=b44ebb19e3234c5dffe9869ceac5408bb44c2e20;hp=2a5fe2545882721d6841bad11dae0f15b454bf0d">http://git.kernel.org/?p=git/git.git;a=commitdiff;h=b44ebb19e3234c5dffe9869ceac5408bb44c2e20;hp=2a5fe2545882721d6841bad11dae0f15b454bf0d</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Git Git-shell | <1.7.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2010/07/22/4
- http://www.securityfocus.com/bid/41891
- http://www.openwall.com/lists/oss-security/2010/07/22/1
- http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.7.2.1.txt
- https://bugzilla.redhat.com/show_bug.cgi?id=618108
- http://secunia.com/advisories/43457
- http://www.vupen.com/english/advisories/2011/0464
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
- http://git.kernel.org/?p=git/git.git%3Ba=commit%3Bh=3c9d0414ed2db0167e6c828b547be8fc9f88fccc
- http://seclists.org/oss-sec/2010/q3/93
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=617422
- http://git.kernel.org/?p=git/git.git;a=commitdiff;h=3c9d0414ed2db0167e6c828b547be8fc9f88fccc;hp=c173dad58787a7f11a526dbcdaa5a2fe9ff1c87f
- http://git.kernel.org/?p=git/git.git;a=commitdiff;h=b44ebb19e3234c5dffe9869ceac5408bb44c2e20;hp=2a5fe2545882721d6841bad11dae0f15b454bf0d
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=637953
- http://hjemli.net/git/cgit/commit/?h=v0.8.3.4&id=82a883ede7e47616aba041a5eb36e08666ef9177
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=618108#c4
Frequently Asked Questions
What is the severity of CVE-2010-2542?
CVE-2010-2542 has a high severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2010-2542?
To fix CVE-2010-2542, update Git to a version later than 1.7.2.1.
Who is affected by CVE-2010-2542?
CVE-2010-2542 affects local users running vulnerable versions of Git on their systems.
What type of vulnerability is CVE-2010-2542?
CVE-2010-2542 is classified as a buffer overrun vulnerability.
What can an attacker achieve with CVE-2010-2542?
An attacker can execute arbitrary code with the privileges of the user running the vulnerable Git command.
- agent/first-publish-date
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/references
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-2542
- agent/trending
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/git-scm
- canonical/git git-shell