NVD

Id
28090  
Name
CVE-2015-7545  
Description
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-11-30  
Seq
2015-7545  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147511 28090 CVE-2015-7545 openSUSE-SU-2015:1968  View
147512 28090 CVE-2015-7545 RHSA-2015:2515  View
147513 28090 CVE-2015-7545 [oss-security] 20151208 CVE for git issue - please use CVE-2015-7545  View
147514 28090 CVE-2015-7545 [oss-security] 20151209 Re: CVE for git issue - please use CVE-2015-7545  View
147515 28090 CVE-2015-7545 [oss-security] 20151211 Re: CVE for git issue - please use CVE-2015-7545  View
147516 28090 CVE-2015-7545 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
147517 28090 CVE-2015-7545 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
147518 28090 CVE-2015-7545 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
147519 28090 CVE-2015-7545 78711  View
147520 28090 CVE-2015-7545 SSA:2016-123-01  View
147521 28090 CVE-2015-7545 USN-2835-1  View
147522 28090 CVE-2015-7545 https://bugzilla.redhat.com/show_bug.cgi?id=1269794  View
147523 28090 CVE-2015-7545 https://github.com/git/git/blob/master/Documentation/RelNotes/2.3.10.txt  View
147524 28090 CVE-2015-7545 https://github.com/git/git/blob/master/Documentation/RelNotes/2.4.10.txt  View
147525 28090 CVE-2015-7545 https://github.com/git/git/blob/master/Documentation/RelNotes/2.5.4.txt  View
147526 28090 CVE-2015-7545 https://github.com/git/git/blob/master/Documentation/RelNotes/2.6.1.txt  View
147527 28090 CVE-2015-7545 https://kernel.googlesource.com/pub/scm/git/git/+/33cfccbbf35a56e190b79bdec5c85457c952a021  View
147528 28090 CVE-2015-7545 [linux-kernel] 20151005 [ANNOUNCE] Git v2.6.1, v2.5.4, v2.4.10 and v2.3.10  View
147529 28090 CVE-2015-7545 GLSA-201605-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11760 JVNDB-2015-007080 Git の git-remote-ext および不特定の他のリモートヘルパープログラムにおける任意のコードを実行される脆弱性 Git の (1) git-remote-ext および (2) 不特定の他のリモートヘルパープログラムは、許可されるプロトコルを適切に制限しないため、任意のコードを実行される脆弱性が存在します。 CVE-2015-7545 84770 CVE-2015-7545 28090 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007080.html 2015-09-29 2016-04-21 View