CVE-2017-1000117
Fixed in a distro release EPSS 78%
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.
Products: git-scm git
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | git | 2.14.1-r0 |
| Alpine 3.11 | git | 2.14.1-r0 |
| Alpine 3.12 | git | 2.14.1-r0 |
| Alpine 3.13 | git | 2.14.1-r0 |
| Alpine 3.14 | git | 2.14.1-r0 |
| Alpine 3.15 | git | 2.14.1-r0 |
| Alpine 3.16 | git | 2.14.1-r0 |
| Alpine 3.17 | git | 2.14.1-r0 |
| Alpine 3.18 | git | 2.14.1-r0 |
| Alpine 3.19 | git | 2.14.1-r0 |
| Alpine 3.20 | git | 2.14.1-r0 |
| Alpine 3.21 | git | 2.14.1-r0 |
| Alpine 3.22 | git | 2.14.1-r0 |
| Alpine 3.23 | git | 2.14.1-r0 |
| Alpine 3.24 | git | 2.14.1-r0 |
| Alpine 3.3 | git | 2.8.6-r0 |
| Alpine 3.4 | git | 2.8.6 |
| Alpine 3.5 | git | 2.11.3-r0 |
| Alpine 3.6 | git | 2.13.5 |
| Alpine 3.7 | git | 2.14.1-r0 |
| Alpine 3.8 | git | 2.14.1-r0 |
| Alpine 3.9 | git | 2.14.1-r0 |
| Arch Linux | git | 2.14.1-1 |
| Debian 12 | git | 1:2.14.1-1 |
| Debian 13 | git | 1:2.14.1-1 |
| Debian 14 | git | 1:2.14.1-1 |
| Debian 7 | git | 1:1.7.10.4-1+wheezy5 |
| Debian 8 | git | 1:2.1.4-2.1+deb8u4 |
| Debian 9 | git | 1:2.11.0-3+deb9u1 |
| Red Hat Enterprise Linux 6 | emacs-git | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | emacs-git-el | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | git | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | git-all | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | git-cvs | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | git-daemon | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | git-debuginfo | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | git-email | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | git-gui | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | git-svn | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | gitk | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | gitweb | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 6 | perl-Git | 0:1.7.1-9.el6_9 |
| Red Hat Enterprise Linux 7 | emacs-git | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | emacs-git-el | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-all | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-bzr | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-cvs | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-daemon | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-debuginfo | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-email | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-gui | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-hg | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-p4 | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | git-svn | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | gitk | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | gitweb | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | perl-Git | 0:1.8.3.1-12.el7_4 |
| Red Hat Enterprise Linux 7 | perl-Git-SVN | 0:1.8.3.1-12.el7_4 |
| Red Hat mobile application platform 4.5 | fh-system-dump-tool | 0:1.0.0-5.el7 |
| Red Hat mobile application platform 4.5 | fping | 0:3.10-4.el7map |
| Red Hat mobile application platform 4.5 | fping-debuginfo | 0:3.10-4.el7map |
| Red Hat mobile application platform 4.5 | nagios | 0:4.0.8-8.el7map |
| Red Hat mobile application platform 4.5 | nagios-common | 0:4.0.8-8.el7map |
| Red Hat mobile application platform 4.5 | nagios-debuginfo | 0:4.0.8-8.el7map |
| Red Hat mobile application platform 4.5 | nagios-devel | 0:4.0.8-8.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-all | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-apt | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-breeze | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-by_ssh | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-cluster | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-dbi | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-debuginfo | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-dhcp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-dig | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-disk | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-disk_smb | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-dns | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-dummy | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-file_age | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-flexlm | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-fping | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-game | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-hpjd | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-http | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-icmp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ide_smart | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ifoperstatus | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ifstatus | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ircd | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ldap | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-load | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-log | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-mailq | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-mrtg | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-mrtgtraf | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-mysql | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-nagios | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-nt | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ntp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ntp-perl | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-nwstat | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-oracle | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-overcr | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-perl | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-pgsql | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ping | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-procs | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-radius | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-real | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-rpc | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-sensors | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-smtp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-snmp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ssh | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-swap | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-tcp | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-time | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-ups | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-uptime | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-users | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | nagios-plugins-wave | 0:2.0.3-3.el7map |
| Red Hat mobile application platform 4.5 | perl-Crypt-CBC | 0:2.33-2.el7map |
| Red Hat mobile application platform 4.5 | perl-Crypt-DES | 0:2.05-20.el7map |
| Red Hat mobile application platform 4.5 | perl-Crypt-DES-debuginfo | 0:2.05-20.el7map |
| Red Hat mobile application platform 4.5 | perl-Net-SNMP | 0:6.0.1-7.el7map |
| Red Hat mobile application platform 4.5 | phantomjs | 0:1.9.7-3.el7map |
| Red Hat mobile application platform 4.5 | phantomjs-debuginfo | 0:1.9.7-3.el7map |
| Red Hat mobile application platform 4.5 | python-meld3 | 0:0.6.10-1.el7map |
| Red Hat mobile application platform 4.5 | python-meld3-debuginfo | 0:0.6.10-1.el7map |
| Red Hat mobile application platform 4.5 | qstat | 0:2.11-13.20080912svn311.el7map |
| Red Hat mobile application platform 4.5 | qstat-debuginfo | 0:2.11-13.20080912svn311.el7map |
| Red Hat mobile application platform 4.5 | radiusclient-ng | 0:0.5.6-9.el7map |
| Red Hat mobile application platform 4.5 | radiusclient-ng-debuginfo | 0:0.5.6-9.el7map |
| Red Hat mobile application platform 4.5 | radiusclient-ng-devel | 0:0.5.6-9.el7map |
| Red Hat mobile application platform 4.5 | radiusclient-ng-utils | 0:0.5.6-9.el7map |
| Red Hat mobile application platform 4.5 | redis | 0:2.8.21-2.el7map |
| Red Hat mobile application platform 4.5 | redis-debuginfo | 0:2.8.21-2.el7map |
| Red Hat mobile application platform 4.5 | rhmap-fh-openshift-templates | 0:4.5.0-11.el7 |
| Red Hat mobile application platform 4.5 | rhmap-mod_authnz_external | 0:3.3.1-7.el7map |
| Red Hat mobile application platform 4.5 | rhmap-mod_authnz_external-debuginfo | 0:3.3.1-7.el7map |
| Red Hat mobile application platform 4.5 | sendEmail | 0:1.56-2.el7 |
| Red Hat mobile application platform 4.5 | ssmtp | 0:2.64-14.el7map |
| Red Hat mobile application platform 4.5 | ssmtp-debuginfo | 0:2.64-14.el7map |
| Red Hat mobile application platform 4.5 | supervisor | 0:3.1.3-3.el7map |
| Red Hat rhel software collections 2 | rh-git29-emacs-git | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-emacs-git-el | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-all | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-all | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-core | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-core | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-core-doc | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-core-doc | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-cvs | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-cvs | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-daemon | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-daemon | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-debuginfo | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-debuginfo | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-email | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-email | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-gui | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-gui | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-p4 | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-git-p4 | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-svn | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-git-svn | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-gitk | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-gitk | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-gitweb | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-gitweb | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-perl-Git | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-perl-Git | 0:2.9.3-3.el7 |
| Red Hat rhel software collections 2 | rh-git29-perl-Git-SVN | 0:2.9.3-3.el6 |
| Red Hat rhel software collections 2 | rh-git29-perl-Git-SVN | 0:2.9.3-3.el7 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Server 12 SP2 | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Server 12 SP3 | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Server 12-LTSS | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | git | 1.7.12.4-0.18.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | git | 2.12.3-27.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | git | 2.12.3-27.5.1 |
| SUSE OpenStack Cloud 6 | git | 2.12.3-27.5.1 |
| SUSE Studio Onsite 1.3 | git | 1.7.12.4-0.18.3.1 |
| Ubuntu 14.04 LTS | git | 1:1.9.1-1ubuntu0.6 |
| Ubuntu 16.04 LTS | git | 1:2.7.4-0ubuntu1.2 |
| openSUSE Tumbleweed | git | 2.33.0-1.3 |