Known vulnerabilities in git (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:git_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 35
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting git (Ubuntu package) git (Ubuntu package) is affected by 35 known vulnerabilities: 17 high, 9 medium, 9 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112646 - Product UI does not Warn User of Unsafe Actions
CVE-2025-46835
CWE-356 Medium
No
No
1:2.7.4-0ubuntu1.10+esm9, 1:2.7.4-0ubuntu1.10+esm10, 1:2.7.4-0ubuntu1.10+esm11, 1:2.17.1-1ubuntu0.18+esm2, 1:2.17.1-1ubuntu0.18+esm3, 1:2.17.1-1ubuntu0.18+esm4, 1:2.25.1-1ubuntu3.14+esm1, 1:2.25.1-1ubuntu3.14+esm2, 1:2.25.1-1ubuntu3.14+esm3, 1:2.34.1-1ubuntu1.13, 1:2.34.1-1ubuntu1.14, 1:2.34.1-1ubuntu1.15, 1:2.43.0-1ubuntu7.3, 1:2.45.2-1ubuntu1.2, 1:2.48.1-0ubuntu1.1 09.07.2025 SB2025070994
SB20250709121
SB2025071019
and 22 more
#VU112643 - Improper input validation
CVE-2025-27614
CWE-20 High
No
No
1:2.7.4-0ubuntu1.10+esm9, 1:2.7.4-0ubuntu1.10+esm10, 1:2.7.4-0ubuntu1.10+esm11, 1:2.17.1-1ubuntu0.18+esm2, 1:2.17.1-1ubuntu0.18+esm3, 1:2.17.1-1ubuntu0.18+esm4, 1:2.25.1-1ubuntu3.14+esm1, 1:2.25.1-1ubuntu3.14+esm2, 1:2.25.1-1ubuntu3.14+esm3, 1:2.34.1-1ubuntu1.13, 1:2.34.1-1ubuntu1.14, 1:2.34.1-1ubuntu1.15, 1:2.43.0-1ubuntu7.3, 1:2.45.2-1ubuntu1.2, 1:2.48.1-0ubuntu1.1 09.07.2025 SB2025070994
SB20250709119
SB2025071019
and 18 more
#VU112642 - Protection Mechanism Failure
CVE-2025-27613
CWE-693 High
No
No
1:2.7.4-0ubuntu1.10+esm9, 1:2.7.4-0ubuntu1.10+esm10, 1:2.7.4-0ubuntu1.10+esm11, 1:2.17.1-1ubuntu0.18+esm2, 1:2.17.1-1ubuntu0.18+esm3, 1:2.17.1-1ubuntu0.18+esm4, 1:2.25.1-1ubuntu3.14+esm1, 1:2.25.1-1ubuntu3.14+esm2, 1:2.25.1-1ubuntu3.14+esm3, 1:2.34.1-1ubuntu1.13, 1:2.34.1-1ubuntu1.14, 1:2.34.1-1ubuntu1.15, 1:2.43.0-1ubuntu7.3, 1:2.45.2-1ubuntu1.2, 1:2.48.1-0ubuntu1.1 09.07.2025 SB2025070994
SB20250709122
SB2025071019
and 22 more
#VU112639 - Memory corruption
CVE-2025-48386
CWE-119 High
No
No
1:2.7.4-0ubuntu1.10+esm9, 1:2.7.4-0ubuntu1.10+esm10, 1:2.7.4-0ubuntu1.10+esm11, 1:2.17.1-1ubuntu0.18+esm2, 1:2.17.1-1ubuntu0.18+esm3, 1:2.17.1-1ubuntu0.18+esm4, 1:2.25.1-1ubuntu3.14+esm1, 1:2.25.1-1ubuntu3.14+esm2, 1:2.25.1-1ubuntu3.14+esm3, 1:2.34.1-1ubuntu1.13, 1:2.34.1-1ubuntu1.14, 1:2.34.1-1ubuntu1.15, 1:2.43.0-1ubuntu7.3, 1:2.45.2-1ubuntu1.2, 1:2.48.1-0ubuntu1.1 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 12 more
#VU112638 - Improper input validation
CVE-2025-48385
CWE-20 High
No
No
1:2.7.4-0ubuntu1.10+esm9, 1:2.7.4-0ubuntu1.10+esm10, 1:2.7.4-0ubuntu1.10+esm11, 1:2.17.1-1ubuntu0.18+esm2, 1:2.17.1-1ubuntu0.18+esm3, 1:2.17.1-1ubuntu0.18+esm4, 1:2.25.1-1ubuntu3.14+esm1, 1:2.25.1-1ubuntu3.14+esm2, 1:2.25.1-1ubuntu3.14+esm3, 1:2.34.1-1ubuntu1.13, 1:2.34.1-1ubuntu1.14, 1:2.34.1-1ubuntu1.15, 1:2.43.0-1ubuntu7.3, 1:2.45.2-1ubuntu1.2, 1:2.48.1-0ubuntu1.1 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 38 more
#VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-48384
CWE-93 Medium
Available
Exploited
1:2.7.4-0ubuntu1.10+esm9, 1:2.7.4-0ubuntu1.10+esm10, 1:2.7.4-0ubuntu1.10+esm11, 1:2.17.1-1ubuntu0.18+esm2, 1:2.17.1-1ubuntu0.18+esm3, 1:2.17.1-1ubuntu0.18+esm4, 1:2.25.1-1ubuntu3.14+esm1, 1:2.25.1-1ubuntu3.14+esm2, 1:2.25.1-1ubuntu3.14+esm3, 1:2.34.1-1ubuntu1.13, 1:2.34.1-1ubuntu1.14, 1:2.34.1-1ubuntu1.15, 1:2.43.0-1ubuntu7.3, 1:2.45.2-1ubuntu1.2, 1:2.48.1-0ubuntu1.1 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 52 more
#VU102870 - Improper Encoding or Escaping of Output
CVE-2024-50349
CWE-116 Low
No
No
1:2.7.4-0ubuntu1.10+esm13, 1:2.17.1-1ubuntu0.18+esm6, 1:2.25.1-1ubuntu3.14, 1:2.34.1-1ubuntu1.12, 1:2.43.0-1ubuntu7.2, 1:2.45.2-1ubuntu1.1 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU102869 - Improper Encoding or Escaping of Output
CVE-2024-52006
CWE-116 Low
No
No
1:2.7.4-0ubuntu1.10+esm13, 1:2.17.1-1ubuntu0.18+esm6, 1:2.25.1-1ubuntu3.14, 1:2.34.1-1ubuntu1.12, 1:2.43.0-1ubuntu7.2, 1:2.45.2-1ubuntu1.1 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU91288 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32465
CWE-94 High
No
No
Ubuntu Pro (Infra-only), 1:2.25.1-1ubuntu3.12, 1:2.34.1-1ubuntu1.11, 1:2.40.1-1ubuntu1.1, 1:2.43.0-1ubuntu7.1 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91287 - UNIX Symbolic Link (Symlink) Following
CVE-2024-32021
CWE-61 Medium
No
No
Ubuntu Pro (Infra-only), 1:2.25.1-1ubuntu3.12, 1:2.34.1-1ubuntu1.11, 1:2.40.1-1ubuntu1.1, 1:2.43.0-1ubuntu7.1 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91286 - UNIX Hard Link
CVE-2024-32020
CWE-62 Medium
No
No
Ubuntu Pro (Infra-only), 1:2.25.1-1ubuntu3.12, 1:2.34.1-1ubuntu1.11, 1:2.40.1-1ubuntu1.1, 1:2.43.0-1ubuntu7.1 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 43 more
#VU89491 - Unrestricted Upload of File with Dangerous Type
CVE-2024-32002
CWE-434 High
Available
No
Ubuntu Pro (Infra-only), 1:2.25.1-1ubuntu3.12, 1:2.25.1-1ubuntu3.13, 1:2.34.1-1ubuntu1.11, 1:2.40.1-1ubuntu1.1, 1:2.43.0-1ubuntu7.1 15.05.2024 SB2024051504
SB2024060720
SB2024060721
and 52 more
#VU89490 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32004
CWE-94 High
No
No
Ubuntu Pro (Infra-only), 1:2.25.1-1ubuntu3.12, 1:2.34.1-1ubuntu1.11, 1:2.40.1-1ubuntu1.1, 1:2.43.0-1ubuntu7.1 15.05.2024 SB2024051503
SB2024060720
SB2024060721
and 51 more
#VU75486 - Improper input validation
CVE-2023-29007
CWE-20 Low
Available
No
Ubuntu Pro (Infra-only), 1:2.17.1-1ubuntu0.18, 1:2.25.1-1ubuntu3.11, 1:2.34.1-1ubuntu1.9, 1:2.37.2-1ubuntu1.5, 1:2.39.2-1ubuntu1.1 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815
CWE-345 Low
No
No
Ubuntu Pro (Infra-only), 1:2.17.1-1ubuntu0.18, 1:2.25.1-1ubuntu3.11, 1:2.34.1-1ubuntu1.9, 1:2.37.2-1ubuntu1.5, 1:2.39.2-1ubuntu1.1 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652
CWE-59 Low
No
No
Ubuntu Pro (Infra-only), 1:2.17.1-1ubuntu0.18, 1:2.25.1-1ubuntu3.11, 1:2.34.1-1ubuntu1.9, 1:2.37.2-1ubuntu1.5, 1:2.39.2-1ubuntu1.1 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU72246 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-22490
CWE-59 Low
No
No
Ubuntu Pro (Infra-only), 1:2.17.1-1ubuntu0.16, 1:2.17.1-1ubuntu0.17, 1:2.25.1-1ubuntu3.10, 1:2.34.1-1ubuntu1.8, 1:2.37.2-1ubuntu1.4 15.02.2023 SB2023021529
SB2023021528
SB2023021533
and 31 more
#VU71239 - Integer overflow
CVE-2022-23521
CWE-190 High
No
No
Ubuntu Pro (Infra-only), 1:2.17.1-1ubuntu0.14, 1:2.17.1-1ubuntu0.15, 1:2.25.1-1ubuntu3.7, 1:2.25.1-1ubuntu3.8, 1:2.34.1-1ubuntu1.6, 1:2.37.2-1ubuntu1.2 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 52 more
#VU71238 - Heap-based Buffer Overflow
CVE-2022-41903
CWE-122 High
No
No
Ubuntu Pro (Infra-only), 1:2.17.1-1ubuntu0.14, 1:2.17.1-1ubuntu0.15, 1:2.25.1-1ubuntu3.7, 1:2.25.1-1ubuntu3.8, 1:2.34.1-1ubuntu1.6, 1:2.37.2-1ubuntu1.2 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 51 more
#VU68517 - Improper input validation
CVE-2022-39253
CWE-20 Low
Available
No
Ubuntu Pro (Infra-only), 1:2.17.1-1ubuntu0.13, 1:2.25.1-1ubuntu3.6, 1:2.34.1-1ubuntu1.5, 1:2.37.2-1ubuntu1.1 19.10.2022 SB2022101995
SB2022101996
SB2022101997
and 41 more


Showing elements 1 - 20 out of 35