Git - Critical Overflow bugs

Description:

Git has become the common and popular platform for source code management. Every developer resides on git to manage the code due to which it has become more prone towards various cyber attacks. A security audit of the source code for Git has revealed several vulnerabilities, including two critical overflow bugs which can be exploited by git clone and git archive command.

One of the most severe flaws that researchers had discovered was a memory corruption bug. It can occur when Git parses the .gitattributes file of a repository. .gitattribute is used by developers to customize different files and file paths in git repositories. A malicious .gitattributes file might be added to a repository, which would allow an attacker to take advantage of the flaw. The flaw would become active when the victim used git clone or git pull on the repository. Long attributes and many attribute lines in the .gitattribute file can lead to arbitrary code execution.

In addition to this, another critical bug was also discovered which would enable code execution during archive operations frequently carried out by Git forges like GitHub and GitLab. The overflow bug is activated when processing the padding operator, either directly by using the argument injection like --format specifier with the git log command or indirectly by using the export-subst mechanism to execute the git archive command. git log and git archive are used to display commits using pretty formatting.

Along with the serious flaws, the researchers discovered several integer-related problems that could result in denial-of-service attacks, out-of-bound reads, or simply badly handled corner cases on huge input.

Affected Versions :

Patched Versions :

CVE_IDs: 

Source:

Impact:

Recommendation: