Vulnerability identifier: #VU75486

Vulnerability risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C]

CVE-ID: CVE-2023-29007

CWE-ID: CWE-20

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
Git for Windows
Other software / Other software solutions

Vendor: Git for Windows

Description

The vulnerability allows an attacker to tamper with Git configuration.

The vulnerability exists due to insufficient input validation in "git submodule deinit" when renaming or deleting a section from a configuration file. A remote attacker can trick the victim into running the command a malicious configuration file and tamper with Git configuration on the affected system.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Git for Windows: 2.0.0 - 2.40.0.1

---

External links
http://github.com/git-for-windows/git/releases/tag/v2.39.3.windows.1
http://github.com/git-for-windows/git/releases/tag/v2.40.1.windows.1
http://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.