Known vulnerabilities in git (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:git_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 29
Public exploits: 4
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting git (Red Hat package) git (Red Hat package) is affected by 29 known vulnerabilities: 10 high, 9 medium, 10 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112646 - Product UI does not Warn User of Unsafe Actions
CVE-2025-46835
CWE-356 Medium
No
No
2.43.7-1.el8_10, 2.47.3-1.el9_6, 2.47.3-1.el10_0 09.07.2025 SB2025070994
SB20250709121
SB2025071019
and 24 more
#VU112643 - Improper input validation
CVE-2025-27614
CWE-20 High
No
No
2.43.7-1.el8_10, 2.47.3-1.el9_6, 2.47.3-1.el10_0 09.07.2025 SB2025070994
SB20250709119
SB2025071019
and 20 more
#VU112642 - Protection Mechanism Failure
CVE-2025-27613
CWE-693 High
No
No
2.43.7-1.el8_10, 2.47.3-1.el9_6, 2.47.3-1.el10_0 09.07.2025 SB2025070994
SB20250709122
SB2025071019
and 22 more
#VU112638 - Improper input validation
CVE-2025-48385
CWE-20 High
No
No
2.39.5-1.el8_8.2, 2.39.5-1.el9_2.2, 2.43.5-1.el9_4.2, 2.43.7-1.el8_10, 2.47.3-1.el9_6, 2.47.3-1.el10_0 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 38 more
#VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-48384
CWE-93 Medium
Available
Exploited
1.8.3.1-25.el7_9.1, 2.18.4-5.el8_2.1, 2.27.0-5.el8_4.1, 2.31.1-6.el9_0.1, 2.31.8-3.el8_6.1, 2.39.5-1.el8_8.2, 2.39.5-1.el9_2.2, 2.43.5-1.el9_4.2, 2.43.7-1.el8_10, 2.47.3-1.el9_6, 2.47.3-1.el10_0 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 54 more
#VU102871 - Improper Encoding or Escaping of Output
CVE-2024-52005
CWE-116 Medium
No
No
2.39.5-1.el9_2.1, 2.43.5-1.el9_4.1, 2.43.5-3.el8_10, 2.47.1-2.el9_6 16.01.2025 SB2025011641
SB2025021457
SB2025051343
and 18 more
#VU102870 - Improper Encoding or Escaping of Output
CVE-2024-50349
CWE-116 Low
No
No
2.43.7-1.el8_10, 2.47.3-1.el9_6, 2.47.3-1.el10_0 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU102869 - Improper Encoding or Escaping of Output
CVE-2024-52006
CWE-116 Low
No
No
2.43.7-1.el8_10, 2.47.3-1.el9_6, 2.47.3-1.el10_0 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU91288 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32465
CWE-94 High
No
No
2.43.5-1.el8_10, 2.43.5-1.el9_4 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91287 - UNIX Symbolic Link (Symlink) Following
CVE-2024-32021
CWE-61 Medium
No
No
2.43.5-1.el8_10, 2.43.5-1.el9_4 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91286 - UNIX Hard Link
CVE-2024-32020
CWE-62 Medium
No
No
2.43.5-1.el8_10, 2.43.5-1.el9_4 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 43 more
#VU89491 - Unrestricted Upload of File with Dangerous Type
CVE-2024-32002
CWE-434 High
Available
No
2.31.1-6.el9_0, 2.39.5-1.el8_8, 2.43.5-1.el8_10, 2.43.5-1.el9_4 15.05.2024 SB2024051504
SB2024060720
SB2024060721
and 52 more
#VU89490 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32004
CWE-94 High
No
No
2.18.4-5.el8_2, 2.31.1-6.el9_0, 2.39.5-1.el8_8, 2.43.5-1.el8_10, 2.43.5-1.el9_4 15.05.2024 SB2024051503
SB2024060720
SB2024060721
and 51 more
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815
CWE-345 Low
No
No
2.18.4-3.el8_1, 2.18.4-4.el8_2, 2.27.0-4.el8_4, 2.31.1-4.el8_6, 2.31.1-5.el9_0, 2.39.3-1.el8_8, 2.39.3-1.el9_2 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652
CWE-59 Low
No
No
1.8.3.1-25.el7_9, 2.18.4-3.el8_1, 2.18.4-4.el8_2, 2.27.0-4.el8_4, 2.31.1-4.el8_6, 2.31.1-5.el9_0, 2.39.3-1.el8_8, 2.39.3-1.el9_2 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU71239 - Integer overflow
CVE-2022-23521
CWE-190 High
No
No
1.8.3.1-24.el7_9, 2.18.4-2.el8_1, 2.18.4-3.el8_2, 2.27.0-3.el8_4, 2.31.1-3.el8_6, 2.31.1-3.el8_7, 2.31.1-3.el9_0, 2.31.1-3.el9_1 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 52 more
#VU71238 - Heap-based Buffer Overflow
CVE-2022-41903
CWE-122 High
No
No
1.8.3.1-24.el7_9, 2.18.4-2.el8_1, 2.18.4-3.el8_2, 2.27.0-3.el8_4, 2.31.1-3.el8_6, 2.31.1-3.el8_7, 2.31.1-3.el9_0, 2.31.1-3.el9_1 17.01.2023 SB2023011739
SB2023011741
SB2023011804
and 51 more
#VU6933 - Permissions, Privileges, and Access Controls
CVE-2017-8386
CWE-264 Low
No
No
1.8.3.1-11.el7 06.06.2017 SB2017060608
SB2017051507
SB2017051020
and 8 more
#VU39436 - Improper input validation
CVE-2014-9938
CWE-20 High
No
No
1.8.3.1-11.el7 20.03.2017 SB2017032013
SB2017032919
SB2017080120
and 1 more
#VU32858 - Credentials Management
CVE-2011-2192
CWE-255 Medium
No
No
1.8.3.1-11.el7 08.07.2011 SB2011070802
SB2011062309
SB2017080120


Showing elements 1 - 20 out of 29