Integer overflow in `git archive`, `git log --format` leading to RCE in git
CVE-2022-41903

9.8CRITICAL

Key Information:

Vendor: Git
Status: Git
Vendor: CVE Published:; 17 January 2023

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 16%

Summary

An integer overflow vulnerability exists in Git's commit formatting feature, specifically within the export-subst gitattribute mechanism. This flaw may be triggered through commands like git log --format=... and allows an attacker to exploit the system, leading to arbitrary writes in memory and potentially enabling arbitrary code execution. To mitigate risks, users are strongly encouraged to upgrade to the patched versions released on January 17, 2023. For those unable to upgrade, it is advised to disable the git archive functionality in untrusted repositories.

Affected Version(s)

git < 2.30.7 < 2.30.7

git >= 2.31.0, < 2.31.6 < 2.31.0, 2.31.6

git >= 2.32.0, < 2.32.5 < 2.32.0, 2.32.5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

git-cveissues
Created by sondermc