https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T11:14:18.233252+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-11233 CVE-2018-11233 2026-09-28T11:14:18.641040+00:00

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.

 https://vulnerability.circl.lu/vuln/usn-3671-1 USN-3671-1 — git vulnerabilities 2026-09-28T11:14:18.641186+00:00

Affected: Ubuntu:14.04:LTS: git, Ubuntu:16.04:LTS: git, Ubuntu:18.04:LTS: git

Etienne Stalmans discovered that git did not properly validate git submodules files. A remote attacker could possibly use this to craft a git repo that causes arbitrary code execution when "git clone --recurse-submodules" is used. (CVE-2018-11235)

It was discovered that an integer overflow existed in git's pathname consistency checking code when used on NTFS filesystems. An attacker could use this to cause a denial of service or expose sensitive information. (CVE-2018-11233)