CVE-2015-7545

CRITICAL

Git <2.3.10-2.6.1 - RCE

Title source: llm

Description

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.

Exploits (1)

nomisec STUB 2 stars
by avuserow · poc
https://github.com/avuserow/bug-free-chainsaw

References (21)

... and 1 more

Scores

CVSS v3 9.8
EPSS 0.3473
EPSS Percentile 97.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-284 CWE-20
Status published
Products (23)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 15.04
canonical/ubuntu_linux 15.10
git_project/git 2.4.0
git_project/git 2.4.1
git_project/git 2.4.2
git_project/git 2.4.3
git_project/git 2.4.4
git_project/git 2.4.5
... and 13 more
Published Apr 13, 2016
Tracked Since Feb 18, 2026