High severity · published Jul 12, 2022
CVE-2022-29187
Git is a distributed revision control system
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when navigating as root into a shared tmp directory that is owned by them, but where an attacker could create a git repository. Versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5 contain a patch for this issue. The simplest way to avoid being affected by the exploit described in the example is to avoid running git as root (or an Administrator in Windows), and if needed to reduce its use to a minimum. While a generic workaround is not possible, a system could be hardened from the exploit described in the example by removing any such repository if it exists already and creating one as root to block any future attacks.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
10.0 · source: NVD
FE
Fedora · Fedoraproject
35; 36; 37 · source: NVD
GI
Git · Git-scm
2.30.3 before 2.30.5; 2.31.2 before 2.31.4; 2.32.1 before 2.32.3; 2.33.2 before 2.33.4; 2.34.2 before 2.34.4; 2.35.2 before 2.35.4; +2 more · source: NVD
XC
Xcode · Apple
before 14.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-29187
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-29187
Mailing List
http://seclists.org/fulldisclosure/2022/Nov/1
Mailing List
http://www.openwall.com/lists/oss-security/2022/07/14/1
Third Party Advisory
https://github.blog/2022-04-12-git-security-vulnerability-announced
Third Party Advisory
https://github.com/git/git/security/advisories/GHSA-j342-m5hw-rr3v
Mailing List
https://lists.debian.org/debian-lts-announce/2022/12/msg00025.html
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDI325LOO2XBDDKLINOAQJEG6MHAURZE/
More from Xcode
8.0
CVE-2025-48384
Git allows arbitrary code execution through broken config quoting
9.8
CVE-2014-9390
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode…
9.8
CVE-2019-14379
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of…
9.8
CVE-2018-4164
An issue was discovered in certain Apple products
9.8
CVE-2016-0746
Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or…
