https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 11:14:18 +0000 https://vulnerability.circl.lu/vuln/cve-2018-11233 <p>In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.</p> <p>In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.</p> https://vulnerability.circl.lu/vuln/cve-2018-11233 https://vulnerability.circl.lu/vuln/usn-3671-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: git, Ubuntu:16.04:LTS: git, Ubuntu:18.04:LTS: git</p> <p>Etienne Stalmans discovered that git did not properly validate git submodules files. A remote attacker could possibly use this to craft a git repo that causes arbitrary code execution when &#34;git clone --recurse-submodules&#34; is used. (CVE-2018-11235)</p> <p>It was discovered that an integer overflow existed in git&#39;s pathname consistency checking code when used on NTFS filesystems. An attacker could use this to cause a denial of service or expose sensitive information. (CVE-2018-11233)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: git, Ubuntu:16.04:LTS: git, Ubuntu:18.04:LTS: git</p> <p>Etienne Stalmans discovered that git did not properly validate git submodules files. A remote attacker could possibly use this to craft a git repo that causes arbitrary code execution when &#34;git clone --recurse-submodules&#34; is used. (CVE-2018-11235)</p> <p>It was discovered that an integer overflow existed in git&#39;s pathname consistency checking code when used on NTFS filesystems. An attacker could use this to cause a denial of service or expose sensitive information. (CVE-2018-11233)</p> https://vulnerability.circl.lu/vuln/usn-3671-1