CVE-2018-11233

HIGH

Canonical Ubuntu Linux < 2.13.6 - Out-of-Bounds Read

Title source: rule

Description

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.

Exploits (2)

gitlab NO CODE
by 0xBADCA7 · poc
https://gitlab.com/0xBADCA7/CVE-2018-11233-evil

References (7)

Scores

CVSS v3 7.5
EPSS 0.0031
EPSS Percentile 54.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-125
Status published
Products (6)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 17.10
canonical/ubuntu_linux 18.04
git-scm/git 2.17.0
git-scm/git < 2.13.6
Published May 30, 2018
Tracked Since Feb 18, 2026