Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-29007

Fixed in a distro release EPSS 6%CVSS 7.0

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`.

Published 2023-04-25 · CVE record · OSV

Products: git

Distro releases

ReleasePackageFixed in
AlmaLinux 8git2.39.3-1.el8_8
AlmaLinux 8git-all2.39.3-1.el8_8
AlmaLinux 8git-core2.39.3-1.el8_8
AlmaLinux 8git-core-doc2.39.3-1.el8_8
AlmaLinux 8git-credential-libsecret2.39.3-1.el8_8
AlmaLinux 8git-daemon2.39.3-1.el8_8
AlmaLinux 8git-email2.39.3-1.el8_8
AlmaLinux 8git-gui2.39.3-1.el8_8
AlmaLinux 8git-instaweb2.39.3-1.el8_8
AlmaLinux 8git-subtree2.39.3-1.el8_8
AlmaLinux 8git-svn2.39.3-1.el8_8
AlmaLinux 8gitk2.39.3-1.el8_8
AlmaLinux 8gitweb2.39.3-1.el8_8
AlmaLinux 8perl-Git2.39.3-1.el8_8
AlmaLinux 8perl-Git-SVN2.39.3-1.el8_8
AlmaLinux 9git2.39.3-1.el9_2
AlmaLinux 9git-all2.39.3-1.el9_2
AlmaLinux 9git-core2.39.3-1.el9_2
AlmaLinux 9git-core-doc2.39.3-1.el9_2
AlmaLinux 9git-credential-libsecret2.39.3-1.el9_2
AlmaLinux 9git-daemon2.39.3-1.el9_2
AlmaLinux 9git-email2.39.3-1.el9_2
AlmaLinux 9git-gui2.39.3-1.el9_2
AlmaLinux 9git-instaweb2.39.3-1.el9_2
AlmaLinux 9git-subtree2.39.3-1.el9_2
AlmaLinux 9git-svn2.39.3-1.el9_2
AlmaLinux 9gitk2.39.3-1.el9_2
AlmaLinux 9gitweb2.39.3-1.el9_2
AlmaLinux 9perl-Git2.39.3-1.el9_2
AlmaLinux 9perl-Git-SVN2.39.3-1.el9_2
Alpine 3.14git2.32.7-r0
Alpine 3.15git2.34.8-r0
Alpine 3.16git2.36.6-r0
Alpine 3.17git2.38.5-r0
Alpine 3.18git2.40.1-r0
Alpine 3.19git2.40.1-r0
Alpine 3.20git2.40.1-r0
Alpine 3.21git2.40.1-r0
Alpine 3.22git2.40.1-r0
Alpine 3.23git2.40.1-r0
Alpine 3.24git2.40.1-r0
Amazon Linux 2git2.40.1-1.amzn2.0.1
Amazon Linux 2git-all2.40.1-1.amzn2.0.1
Amazon Linux 2git-core2.40.1-1.amzn2.0.1
Amazon Linux 2git-core-doc2.40.1-1.amzn2.0.1
Amazon Linux 2git-credential-libsecret2.40.1-1.amzn2.0.1
Amazon Linux 2git-cvs2.40.1-1.amzn2.0.1
Amazon Linux 2git-daemon2.40.1-1.amzn2.0.1
Amazon Linux 2git-email2.40.1-1.amzn2.0.1
Amazon Linux 2git-gui2.40.1-1.amzn2.0.1
Amazon Linux 2git-instaweb2.40.1-1.amzn2.0.1
Amazon Linux 2git-p42.40.1-1.amzn2.0.1
Amazon Linux 2git-subtree2.40.1-1.amzn2.0.1
Amazon Linux 2git-svn2.40.1-1.amzn2.0.1
Amazon Linux 2gitk2.40.1-1.amzn2.0.1
Amazon Linux 2gitweb2.40.1-1.amzn2.0.1
Amazon Linux 2perl-Git2.40.1-1.amzn2.0.1
Amazon Linux 2perl-Git-SVN2.40.1-1.amzn2.0.1
Amazon Linux 2023git2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-all2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-core2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-core-doc2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-credential-libsecret2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-cvs2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-daemon2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-email2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-gui2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-instaweb2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-p42.40.1-1.amzn2023.0.1
Amazon Linux 2023git-subtree2.40.1-1.amzn2023.0.1
Amazon Linux 2023git-svn2.40.1-1.amzn2023.0.1
Amazon Linux 2023gitk2.40.1-1.amzn2023.0.1
Amazon Linux 2023gitweb2.40.1-1.amzn2023.0.1
Amazon Linux 2023perl-Git2.40.1-1.amzn2023.0.1
Amazon Linux 2023perl-Git-SVN2.40.1-1.amzn2023.0.1
Chainguardgit2.40.1-r0
Debian 10git1:2.20.1-2+deb10u9
Debian 11git1:2.30.2-1+deb11u3
Debian 12git1:2.39.5-0+deb12u1
Debian 13git1:2.40.1-1
Debian 14git1:2.40.1-1
Red Hat Enterprise Linux 7emacs-git0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7emacs-git-el0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-all0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-bzr0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-cvs0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-daemon0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-debuginfo0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-email0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-gnome-keyring0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-gui0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-hg0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-instaweb0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-p40:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7git-svn0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7gitk0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7gitweb0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7perl-Git0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 7perl-Git-SVN0:1.8.3.1-25.el7_9
Red Hat Enterprise Linux 8git0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-all0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-core0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-core-debuginfo0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-core-doc0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-credential-libsecret0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-credential-libsecret-debuginfo0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-daemon0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-daemon-debuginfo0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-debuginfo0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-debugsource0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-email0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-gui0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-instaweb0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-subtree0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8git-svn0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8gitk0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8gitweb0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8perl-Git0:2.39.3-1.el8_8
Red Hat Enterprise Linux 8perl-Git-SVN0:2.39.3-1.el8_8
Red Hat Enterprise Linux 9git0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-all0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-core0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-core-debuginfo0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-core-doc0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-credential-libsecret0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-credential-libsecret-debuginfo0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-daemon0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-daemon-debuginfo0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-debuginfo0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-debugsource0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-email0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-gui0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-instaweb0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-subtree0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9git-svn0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9gitk0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9gitweb0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9perl-Git0:2.39.3-1.el9_2
Red Hat Enterprise Linux 9perl-Git-SVN0:2.39.3-1.el9_2
Red Hat rhel aus 8.2git0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-all0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-core0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-core-debuginfo0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-core-doc0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-daemon0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-daemon-debuginfo0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-debuginfo0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-debugsource0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-email0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-gui0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-instaweb0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-subtree0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-svn0:2.18.4-4.el8_2
Red Hat rhel aus 8.2git-svn-debuginfo0:2.18.4-4.el8_2
Red Hat rhel aus 8.2gitk0:2.18.4-4.el8_2
Red Hat rhel aus 8.2gitweb0:2.18.4-4.el8_2
Red Hat rhel aus 8.2perl-Git0:2.18.4-4.el8_2
Red Hat rhel aus 8.2perl-Git-SVN0:2.18.4-4.el8_2
Red Hat rhel e4s 8.1git0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-all0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-core0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-core-debuginfo0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-core-doc0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-daemon0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-daemon-debuginfo0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-debuginfo0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-debugsource0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-email0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-gui0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-instaweb0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-subtree0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-svn0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1git-svn-debuginfo0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1gitk0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1gitweb0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1perl-Git0:2.18.4-3.el8_1
Red Hat rhel e4s 8.1perl-Git-SVN0:2.18.4-3.el8_1
Red Hat rhel eus 8.4git0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-all0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-core0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-core-debuginfo0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-core-doc0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-credential-libsecret0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-credential-libsecret-debuginfo0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-daemon0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-daemon-debuginfo0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-debuginfo0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-debugsource0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-email0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-gui0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-instaweb0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-subtree0:2.27.0-4.el8_4
Red Hat rhel eus 8.4git-svn0:2.27.0-4.el8_4
Red Hat rhel eus 8.4gitk0:2.27.0-4.el8_4
Red Hat rhel eus 8.4gitweb0:2.27.0-4.el8_4
Red Hat rhel eus 8.4perl-Git0:2.27.0-4.el8_4
Red Hat rhel eus 8.4perl-Git-SVN0:2.27.0-4.el8_4
Red Hat rhel eus 8.6git0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-all0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-core0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-core-debuginfo0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-core-doc0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-credential-libsecret0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-credential-libsecret-debuginfo0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-daemon0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-daemon-debuginfo0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-debuginfo0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-debugsource0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-email0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-gui0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-instaweb0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-subtree0:2.31.1-4.el8_6
Red Hat rhel eus 8.6git-svn0:2.31.1-4.el8_6
Red Hat rhel eus 8.6gitk0:2.31.1-4.el8_6
Red Hat rhel eus 8.6gitweb0:2.31.1-4.el8_6
Red Hat rhel eus 8.6perl-Git0:2.31.1-4.el8_6
Red Hat rhel eus 8.6perl-Git-SVN0:2.31.1-4.el8_6
Red Hat rhel eus 9.0git0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-all0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-core0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-core-debuginfo0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-core-doc0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-credential-libsecret0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-credential-libsecret-debuginfo0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-daemon0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-daemon-debuginfo0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-debuginfo0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-debugsource0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-email0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-gui0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-instaweb0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-subtree0:2.31.1-5.el9_0
Red Hat rhel eus 9.0git-svn0:2.31.1-5.el9_0
Red Hat rhel eus 9.0gitk0:2.31.1-5.el9_0
Red Hat rhel eus 9.0gitweb0:2.31.1-5.el9_0
Red Hat rhel eus 9.0perl-Git0:2.31.1-5.el9_0
Red Hat rhel eus 9.0perl-Git-SVN0:2.31.1-5.el9_0
Red Hat rhel software collections 3rh-git227-git0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-all0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-core0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-core-doc0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-credential-libsecret0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-cvs0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-daemon0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-debuginfo0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-email0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-gui0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-instaweb0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-p40:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-subtree0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-git-svn0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-gitk0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-gitweb0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-perl-Git0:2.27.0-6.el7
Red Hat rhel software collections 3rh-git227-perl-Git-SVN0:2.27.0-6.el7
Rocky Linux 8git0:2.39.3-1.el8_8
SUSE Enterprise Storage 7git2.26.2-150000.50.1
SUSE Enterprise Storage 7.1git2.35.3-150300.10.27.1
SUSE HPE Helion OpenStack 8git2.26.2-27.69.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSgit2.26.2-150000.50.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSgit2.26.2-150000.50.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSgit2.35.3-150300.10.27.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSgit2.35.3-150300.10.27.1
SUSE Linux Enterprise Module for Basesystem 15 SP4git2.35.3-150300.10.27.1
SUSE Linux Enterprise Module for Development Tools 15 SP4git2.35.3-150300.10.27.1
SUSE Linux Enterprise Real Time 15 SP3git2.35.3-150300.10.27.1
SUSE Linux Enterprise Server 12 SP2-BCLgit2.26.2-27.69.1
SUSE Linux Enterprise Server 12 SP4-ESPOSgit2.26.2-27.69.1
SUSE Linux Enterprise Server 12 SP4-LTSSgit2.26.2-27.69.1
SUSE Linux Enterprise Server 12 SP5git2.26.2-27.69.1
SUSE Linux Enterprise Server 15 SP1-LTSSgit2.26.2-150000.50.1
SUSE Linux Enterprise Server 15 SP2-LTSSgit2.26.2-150000.50.1
SUSE Linux Enterprise Server 15 SP3-LTSSgit2.35.3-150300.10.27.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4git2.26.2-27.69.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5git2.26.2-27.69.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1git2.26.2-150000.50.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2git2.26.2-150000.50.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3git2.35.3-150300.10.27.1
SUSE Linux Enterprise Software Development Kit 12 SP5git2.26.2-27.69.1
SUSE Manager Proxy 4.2git2.35.3-150300.10.27.1
SUSE Manager Server 4.2git2.35.3-150300.10.27.1
SUSE OpenStack Cloud 8git2.26.2-27.69.1
SUSE OpenStack Cloud 9git2.26.2-27.69.1
SUSE OpenStack Cloud Crowbar 9git2.26.2-27.69.1
Ubuntu 18.04 LTSgit1:2.17.1-1ubuntu0.18
Ubuntu 20.04 LTSgit1:2.25.1-1ubuntu3.11
Ubuntu 22.04 LTSgit1:2.34.1-1ubuntu1.9
Ubuntu Pro 16.04 LTSgit1:2.7.4-0ubuntu1.10+esm7
Wolfigit2.40.1-r0
openSUSE Leap 15.4git2.35.3-150300.10.27.1
openSUSE Tumbleweedgit2.40.1-1.1