Input validation error in GitPython - CVE-2023-40267

Vulnerability identifier: #VU79631

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-40267

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can pass specially crafted input to the application and compromise the affected system.

Note, the vulnerability exists due to incomplete fix for CVE-2022-24439.

GitPython
IBM Cloud Pak for Multicloud Management
Red Hat Satellite
Fedora
Red Hat Enterprise Linux for x86_64
Ubuntu
openEuler
python3-git (Ubuntu package)
python-git (Ubuntu package)
yggdrasil-worker-forwarder (Red Hat package)
rubygem-foreman_maintain (Red Hat package)
pulpcore-selinux (Red Hat package)
rubygem-git (Red Hat package)
ansible-core (Red Hat package)
GitPython
python-GitPython
python-GitPython-help
python3-GitPython
python3x-gitpython (Red Hat package)
python-gitpython (Red Hat package)
python-django (Red Hat package)
foreman (Red Hat package)
foreman-installer (Red Hat package)
python-pulpcore (Red Hat package)
automation-controller (Red Hat package)
rubygem-katello (Red Hat package)
satellite (Red Hat package)
rubygem-foreman_rh_cloud (Red Hat package)
puppet-agent (Red Hat package)
rubygem-foreman_theme_satellite (Red Hat package)

Install updates from vendor's website.

GitPython - update to 3.1.32
IBM Cloud Pak for Multicloud Management - update to 2.3.8
Red Hat Satellite - addressed in versions 6.13.5, 6.14
python3-git (Ubuntu package) - addressed in versions Ubuntu Pro, 3.1.30-1ubuntu0.23.04.1
python-git (Ubuntu package) - update to Ubuntu Pro
yggdrasil-worker-forwarder (Red Hat package) - update to 0.0.3-1.el8sat
rubygem-foreman_maintain (Red Hat package) - update to 1.2.12-1.el8sat
pulpcore-selinux (Red Hat package) - update to 1.3.3-1.el8pc
rubygem-git (Red Hat package) - update to 1.18.0-1.el8sat
ansible-core (Red Hat package) - addressed in versions 2.14.9-1.el8ap, 2.14.9-1.el9ap, 2.15.3-1.el8ap, 2.15.3-1.el9ap
GitPython - addressed in versions 3.1.18-2.el8, 3.1.32-1.el9, 3.1.32-1.fc37, 3.1.32-1.fc38
python-GitPython - update to 3.1.32-1
python-GitPython-help - update to 3.1.32-1
python3-GitPython - update to 3.1.32-1
python3x-gitpython (Red Hat package) - update to 3.1.32-1.el8ap
python-gitpython (Red Hat package) - addressed in versions 3.1.32-1.el9ap, 3.1.32-1.el8pc
python-django (Red Hat package) - update to 3.2.21-1.el8pc
foreman (Red Hat package) - update to 3.5.1.23-1.el8sat
foreman-installer (Red Hat package) - update to 3.5.2.4-1.el8sat
python-pulpcore (Red Hat package) - update to 3.21.18-1.el8pc
automation-controller (Red Hat package) - addressed in versions 4.3.13-1.el8ap, 4.3.13-1.el9ap, 4.4.3-1.el8ap, 4.4.3-1.el9ap
rubygem-katello (Red Hat package) - update to 4.7.0.33-1.el8sat
satellite (Red Hat package) - update to 6.13.5-1.el8sat
rubygem-foreman_rh_cloud (Red Hat package) - update to 7.0.48-1.el8sat
puppet-agent (Red Hat package) - update to 7.26.0-3.el8sat
rubygem-foreman_theme_satellite (Red Hat package) - update to 11.0.0.6-1.el8sat

• https://github.com/gitpython-developers/GitPython/commit/ca965ecc81853bca7675261729143f54e5bf4cdd
• https://github.com/gitpython-developers/GitPython/pull/1609

• Remote code execution in GitPython
• Fedora 38 update for GitPython
• Fedora 37 update for GitPython
• Fedora EPEL 9 update for GitPython
• Fedora EPEL 8 update for GitPython
• Ubuntu update for python-git
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4 for RHEL 9
• Denial of service in Red Hat Ansible Automation Platform 2.3
• Multiple vulnerabilities in Red Hat Satellite
• Multiple vulnerabilities in Red Hat Satellite 6.14
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• openEuler update for python-GitPython