SB2022041262 - Multiple vulnerabilities in Git

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Insecure DLL loading (CVE-ID: CVE-2022-24767)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the uninstaller binary loads DLL libraries in an insecure manner from the current working directory. A local user can place a specially crafted .dll file onto the system, trick the victim to run the uninstaller binary from that directory and execute arbitrary code with elevated privileges.

2) Untrusted search path (CVE-ID: CVE-2022-24765)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application uses by default the C:\.git folder. A local user with ability to write files into the said directory can place a malicious file into it and execute it with elevated privileges.

Users of the Microsoft fork of Git are vulnerable simply by starting a Git Bash.

Remediation

Install update from vendor's website.

References

• https://github.com/git-for-windows/git/security/advisories/GHSA-gf48-x3vr-j5c3
• https://github.com/git-for-windows/git/releases/tag/v2.35.2.windows.1
• https://github.com/git-for-windows/git/security/advisories/GHSA-vw2c-22j4-2fh2
• https://github.com/git-for-windows/git/releases/tag/v2.32.1.windows.1