Vulnérabilité · NVD

CVE-2017-1000117

HIGH 8.8 Publié le 2017-10-05

EN A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.

Vecteur d'attaque : Réseau Aucun privilège requis

Voir le vecteur CVSS brut

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS 77.82% exploit probable percentile 99.5%

Apps suivies liées à cette CVE

Pour chaque app : la plage affectée, la version qui corrige, et où en est l'app suivie aujourd'hui.

Git Windows winget:Git.Git

Affecté — Corrigé — Dernière suivie 2.55.0.3 indéterminé

Configurations CPE vulnérables (51)

Vendor	Produit	Plateforme	Versions	CPE 2.3 URI
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	≤2.7.5	cpe:2.3:a:git-scm:git::::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.0:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.0:rc0::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.0:rc1::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.0:rc2::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.0:rc3::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.1:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.2:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.3:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.4:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.8.5:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.9.0:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.9.0:rc0::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.9.0:rc1::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.9.0:rc2::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.9.1:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.9.2:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.9.3:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.9.4:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.10.0:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.10.0:rc0::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.10.0:rc1::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.10.0:rc2::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.10.1:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.10.2:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.10.3:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.11.0:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.11.0:rc0::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.11.0:rc1::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.11.0:rc2::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.11.0:rc3::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.11.1:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.11.2:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.12.0:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.12.0:rc0::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.12.0:rc1::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.12.0:rc2::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.12.1:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.12.2:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.12.3:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.13.0:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.13.0:rc0::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.13.0:rc1::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.13.0:rc2::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.13.1:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.13.2:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.13.3:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.13.4:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.14.0:::::::*
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.14.0:rc0::::::
git-scm	git Toutes plateformes (wildcard)	Toutes plateformes (wildcard)	—	cpe:2.3:a:git-scm:git:2.14.0:rc1::::::

Voir sur NVD ↗