According to the version of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Affected versions of Git have a vulnerability whereby     Git can be tricked into sending private credentials to     a host controlled by an attacker. Git uses external     'credential helper' programs to store and retrieve     passwords or other credentials from secure storage     provided by the operating system. Specially-crafted     URLs that contain an encoded newline can inject     unintended values into the credential helper protocol     stream, causing the credential helper to retrieve the     password for one server (e.g., good.example.com) for an     HTTP request being made to another server (e.g.,     evil.example.com), resulting in credentials for the     former being sent to the latter. There are no     restrictions on the relationship between the two,     meaning that an attacker can craft a URL that will     present stored credentials for any host to a host of     their choosing. The vulnerability can be triggered by     feeding a malicious URL to git clone. However, the     affected URLs look rather suspicious the likely vector     would be through systems which automatically clone URLs     not visible to the user, such as Git submodules, or     package systems built around Git. The problem has been     patched in the versions published on April 14th, 2020,     going back to v2.17.x. Anyone wishing to backport the     change further can do so by applying commit 9a6bbee     (the full release includes extra checks for git fsck,     but that commit is sufficient to protect clients     against the vulnerability). The patched versions are:
    2.17.4, 2.18.3, 2.19.4, 2.20.3, 2.21.2, 2.22.3, 2.23.2,     2.24.2, 2.25.3, 2.26.1.(CVE-2020-5260)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has git packages installed that are affected by multiple vulnerabilities:

  - An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3,     v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused     by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in     recursive clones. (CVE-2019-1387)

  - Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials     to a host controlled by an attacker. Git uses external credential helper programs to store and retrieve     passwords or other credentials from secure storage provided by the operating system. Specially-crafted     URLs that contain an encoded newline can inject unintended values into the credential helper protocol     stream, causing the credential helper to retrieve the password for one server (e.g., good.example.com) for     an HTTP request being made to another server (e.g., evil.example.com), resulting in credentials for the     former being sent to the latter. There are no restrictions on the relationship between the two, meaning     that an attacker can craft a URL that will present stored credentials for any host to a host of their     choosing. The vulnerability can be triggered by feeding a malicious URL to git clone. However, the     affected URLs look rather suspicious; the likely vector would be through systems which automatically clone     URLs not visible to the user, such as Git submodules, or package systems built around Git. The problem has     been patched in the versions published on April 14th, 2020, going back to v2.17.x. Anyone wishing to     backport the change further can do so by applying commit 9a6bbee (the full release includes extra checks     for git fsck, but that commit is sufficient to protect clients against the vulnerability). The patched     versions are: 2.17.4, 2.18.3, 2.19.4, 2.20.3, 2.21.2, 2.22.3, 2.23.2, 2.24.2, 2.25.3, 2.26.1.
    (CVE-2020-5260)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the git package has been released.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0109 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2019-1351:
    A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka     'Git for Visual Studio Tampering Vulnerability'.

    CVE-2019-1354:
    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka     'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349,     CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.

    CVE-2019-1387:
    An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3,     v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused     by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in     recursive clones.

    CVE-2020-5260:
    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials     to a host controlled by an attacker. Git uses external credential helper programs to store and retrieve     passwords or other credentials from secure storage provided by the operating system. Specially-crafted     URLs that contain an encoded newline can inject unintended values into the credential helper protocol     stream, causing the credential helper to retrieve the password for one server (e.g., good.example.com) for     an HTTP request being made to another server (e.g., evil.example.com), resulting in credentials for the     former being sent to the latter. There are no restrictions on the relationship between the two, meaning     that an attacker can craft a URL that will present stored credentials for any host to a host of their     choosing. The vulnerability can be triggered by feeding a malicious URL to git clone. However, the     affected URLs look rather suspicious; the likely vector would be through systems which automatically clone     URLs not visible to the user, such as Git submodules, or package systems built around Git. The problem has     been patched in the versions published on April 14th, 2020, going back to v2.17.x. Anyone wishing to     backport the change further can do so by applying commit 9a6bbee (the full release includes extra checks     for git fsck, but that commit is sufficient to protect clients against the vulnerability). The patched     versions are: 2.17.4, 2.18.3, 2.19.4, 2.20.3, 2.21.2, 2.22.3, 2.23.2, 2.24.2, 2.25.3, 2.26.1.

    CVE-2020-11008:
    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials     to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix     for that bug still left the door open for an exploit where _some_ credential is leaked (but the attacker     cannot control which one). Git uses external credential helper programs to store and retrieve passwords     or other credentials from secure storage provided by the operating system. Specially-crafted URLs that are     considered illegal as of the recently published Git versions can cause Git to send a blank pattern to     helpers, missing hostname and protocol fields. Many helpers will interpret this as matching _any_ URL, and     will return some unspecified stored password, leaking the password to an attacker's server. The     vulnerability can be triggered by feeding a malicious URL to `git clone`. However, the affected URLs look     rather suspicious; the likely vector would be through systems which automatically clone URLs not visible     to the user, such as Git submodules, or package systems built around Git. The root of the problem is in     Git itself, which should not be feeding blank input to helpers. However, the ability to exploit the     vulnerability in practice depends on which helpers are in use. Credential helpers which are known to     trigger the vulnerability: - Git's store helper - Git's cache helper - the osxkeychain helper that     ships in Git's contrib directory Credential helpers which are known to be safe even with vulnerable     versions of Git: - Git Credential Manager for Windows Any helper not in this list should be assumed to     trigger the vulnerability.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Felix Wilhelm of Google Project Zero discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline, the credential helper machinery can be fooled to return credential information for a wrong host.

The version of git installed on the remote host is prior to 2.23.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1409 advisory.

    With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give     credential information for a wrong host.  The attack has been made impossible by forbidding a newline     character in any value passed via the credential protocol. (CVE-2020-5260)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security fix for CVE-2020-5260

From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.
4.txt) :

> With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The attack has been made impossible by forbidding > a newline character in any value passed via the credential > protocol.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-5260 and CVE-2020-11008

CVE-2020-5260 - From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.
4.txt) :

> With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The attack has been made impossible by forbidding > a newline character in any value passed via the credential > protocol.

CVE-2020-11008 - From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.
5.txt): > With a crafted URL that contains a newline or empty host, or lacks > a scheme, the credential helper machinery can be fooled into > providing credential information that is not appropriate for the > protocol in use and host being contacted. > > Unlike the vulnerability CVE-2020-5260 fixed in v2.17.4, the > credentials are not for a host of the attacker's choosing; instead, > they are for some unspecified host (based on how the configured > credential helper handles an absent 'host' parameter). > > The attack has been made impossible by refusing to work with > under-specified credential patterns.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1503 advisory.

    Git is a distributed revision control system with a decentralized architecture. As opposed to centralized     version control systems with a client-server model, Git ensures that each working copy of a Git repository     is an exact copy with complete revision history. This not only allows the user to work on and contribute     to projects without the need to have permission to push the changes to their official repositories, but     also makes it possible for the user to work with no network connection.

    Security Fix(es):

    * git: Crafted URL containing new lines can cause credential leak (CVE-2020-5260)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1513 advisory.

    Git is a distributed revision control system with a decentralized architecture. As opposed to centralized     version control systems with a client-server model, Git ensures that each working copy of a Git repository     is an exact copy with complete revision history. This not only allows the user to work on and contribute     to projects without the need to have permission to push the changes to their official repositories, but     also makes it possible for the user to work with no network connection.

    Security Fix(es):

    * git: Crafted URL containing new lines can cause credential leak (CVE-2020-5260)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4031 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4031-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Sean Whitton     January 28, 2025                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : git     Version        : 1:2.30.2-1+deb11u4     CVE ID         : CVE-2024-50349 CVE-2024-52006     Debian Bug     : 1093042

    Multiple vulnerabilities were discovered in git, a fast, scalable and     distributed revision control system.

    CVE-2024-50349

        When Git asks for credentials via a terminal prompt (i.e. without         using any credential helper), it prints out the host name for which         the user is expected to provide a username and/or a password.  At         this stage, any URL-encoded parts have been decoded already, and are         printed verbatim.  This could allow attackers to craft URLs that         contain ANSI escape sequences that the terminal interpret to confuse         users e.g. into providing passwords for trusted Git hosting sites         when in fact they are then sent to untrusted sites that are under         the attacker's control.

    CVE-2024-52006

        Git defines a line-based protocol that is used to exchange         information between Git and Git credential helpers.  Some ecosystems         (most notably, .NET and node.js) interpret single Carriage Return         characters as newlines, which renders the protections against         CVE-2020-5260 incomplete for credential helpers that treat Carriage         Returns in this way.

    For Debian 11 bullseye, these problems have been fixed in version     1:2.30.2-1+deb11u4.

    We recommend that you upgrade your git packages.

    For the detailed security status of git please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/git

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
140878	EulerOS 2.0 SP3 : git (EulerOS-SA-2020-2111)	Nessus	Huawei Local Security Checks	2020/9/28	2024/2/19	high
143890	NewStart CGSL CORE 5.05 / MAIN 5.05 : git Multiple Vulnerabilities (NS-SA-2020-0113)	Nessus	NewStart CGSL Local Security Checks	2020/12/9	2020/12/10	high
252274	Photon OS 5.0: Git PHSA-2025-5.0-0590	Nessus	PhotonOS Local Security Checks	2025/8/19	2025/8/23	critical
236541	Alibaba Cloud Linux 3 : 0109: git (ALINUX3-SA-2022:0109)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
135499	Debian DSA-4657-1 : git - security update	Nessus	Debian Local Security Checks	2020/4/15	2020/4/27	high
135594	Amazon Linux 2 : git (ALAS-2020-1409)	Nessus	Amazon Linux Local Security Checks	2020/4/16	2024/12/11	high
135728	Fedora 31 : git (2020-cdef88bb89)	Nessus	Fedora Local Security Checks	2020/4/20	2020/4/27	high
136211	Fedora 30 : git (2020-4e093619bb)	Nessus	Fedora Local Security Checks	2020/5/1	2024/3/14	high
136328	Photon OS 2.0: Git PHSA-2020-2.0-0236	Nessus	PhotonOS Local Security Checks	2020/5/5	2024/7/22	high
137517	EulerOS 2.0 SP2 : git (EulerOS-SA-2020-1675)	Nessus	Huawei Local Security Checks	2020/6/17	2024/3/6	high
170323	RHEL 7 : rh-git218-git (RHSA-2020:1503)	Nessus	Red Hat Local Security Checks	2023/1/23	2024/11/7	high
135875	RHEL 8 : git (RHSA-2020:1513)	Nessus	Red Hat Local Security Checks	2020/4/22	2024/11/7	high
214705	Debian dla-4031 : git - security update	Nessus	Debian Local Security Checks	2025/1/28	2025/1/28	low

偵測

搜尋 Plugin

high

high

critical

high

high

high

high

high

high

high

high

high

low