Privilege escalation in Git - CVE-2017-8386

Vulnerability identifier: #VU6933

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-8386

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote authenticated attacker to gain elevated privileges on the target system.

The weakness exists due to an error when handling command-line options for the restricted set of git-shell commands. A remote attacker can use a repository name that starts with a - (dash) character to bypass git-shell restrictions and gain elevated privileges.

Successful exploitation of the vulnerability results in access to the system and information disclosure.

Git
Debian Linux
Amazon Linux AMI
Arch Linux
Red Hat Enterprise Linux Server for ARM
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Ubuntu
Fedora
git (Alpine package)
git (Red Hat package)
git
rh-git29-git (Red Hat package)

Update to version 2.13.0.

git (Alpine package) - update to 2.6.7-r0
git (Red Hat package) - update to 1.8.3.1-11.el7
git - addressed in versions 2.7.5-1.fc24, 2.9.4-1.fc25, 2.13.0-1.fc26
rh-git29-git (Red Hat package) - addressed in versions 2.9.3-3.el6, 2.9.3-3.el7

• https://git.kernel.org/pub/scm/git/git.git/commit/?id=3ec804490a265f4c418a321428c12f3f18b7eff5

• Privilege escalation in Git
• Ubuntu update for Git
• Debian update for git
• Amazon Linux AMI update for git
• Arch Linux update for git
• Privilege escalation in git (Alpine package)
• Fedora 24 update for git
• Fedora 25 update for git
• Fedora 26 update for git
• Red Hat Enterprise Linux 7 update for git
• Red Hat Software Collections update for rh-git29-git