REDHAT-BUG-2168161: Medium severity git vulnerability
Published Feb 8, 2023
·Updated
By feeding a crafted input to "git apply", a path outside the working tree can be overwritten as the user who is running "git apply".
Affected Software
1 affected component
Git git
Event History
Feb 8, 2023
Data Sourced
via Red Hat·10:44 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2168161?
REDHAT-BUG-2168161 has significant severity as it allows overwriting paths outside the working tree.
2
How do I fix REDHAT-BUG-2168161?
To fix REDHAT-BUG-2168161, update to the latest version of Git that addresses this vulnerability.
3
What systems are affected by REDHAT-BUG-2168161?
REDHAT-BUG-2168161 affects systems using Git that have a specific exploitable version.
4
What kind of exploit does REDHAT-BUG-2168161 represent?
REDHAT-BUG-2168161 represents a command injection vulnerability allowing unauthorized file overwriting.
5
Who is impacted by the vulnerability REDHAT-BUG-2168161?
Users running Git with the vulnerable version are impacted by REDHAT-BUG-2168161.