CVE-2018-17456 Command injection in n/a
Attackers can execute arbitrary code by crafting a malicious .gitmodules file with a URL starting with a dash during recursive cloning.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-17456?
CVE-2018-17456 is a critical command injection vulnerability in Canonical Ubuntu Linux, published on 6 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.
Weakness: CWE-88
Which versions are affected by CVE-2018-17456?
It affects 11 products.
Linux distribution packages (40)
emacs-git Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
emacs-git-el Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
git Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
git-all Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
git-cvs Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
git-daemon Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
git-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
git-email Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
git-gui Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
git-svn Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
gitk Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
gitweb Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
perl-Git Red Hat:enterprise_linux:6::client | All versions | 0:1.7.1-10.el6_10 |
emacs-git Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
emacs-git-el Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
git Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
git-all Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
git-cvs Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
git-daemon Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
git-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
git-email Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
git-gui Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
git-svn Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
gitk Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
gitweb Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
perl-Git Red Hat:enterprise_linux:6::computenode | All versions | 0:1.7.1-10.el6_10 |
emacs-git Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
emacs-git-el Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
git Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
git-all Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
git-cvs Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
git-daemon Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
git-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
git-email Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
git-gui Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
git-svn Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
gitk Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
gitweb Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
perl-Git Red Hat:enterprise_linux:6::server | All versions | 0:1.7.1-10.el6_10 |
emacs-git Red Hat:enterprise_linux:6::workstation | All versions | 0:1.7.1-10.el6_10 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Git-Scm Git, Redhat Ansible Tower, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop and 5 more.
How do I fix CVE-2018-17456?
Upgrade to a fixed version.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2018-17456 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-17456 exists.
Public exploit code: 1 Metasploit module, 2 Exploit-DB entries and 5 proofs of concept on GitHub.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2018-17456, CLEANSTART-2026-QG10579, DEBIAN-CVE-2018-17456, DLA-1533-1, DSA-4311-1, GHSA-g986-jp62-5xq6 and 11 more.