Vulnerabilitycritical

Critical RCE vulnerabilities found in git (CVE-2022-41903, CVE-2022-23251)

Help Net Securityby @zeljkazorzJan 19, 2023 · 00:00 UTC (Jan 19, 2023)2 min read4 · 3 reads

Read at helpnetsecurity.com

Analyze CVE-2022-41903 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-41903 CVE-2022-23251 CVE-2022-41953

Tags: cve-2022-41903 cve-2022-23251 cve-2022-41953 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-41903 +1 related CVE CVE-2022-41953	Git is distributed revision control system	9.8 group max	44%		Jan 17, 2023

From the original article

2 min read at helpnetsecurity.com

A source code audit has revealed two critical vulnerabilities affecting git , the popular distributed version control system for collaborative software development. CVE-2022-41903 is an out-of-bounds memory write flaw in log formatting and CVE-2022-23251 is a truncated allocation leading to out-of-bounds write via large number of attributes. Both may result in remote code execution.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.