1. Home
  2. CVE Database
  3. CVE-2018-1000021
MEDIUM · 5.0

CVE-2018-1000021

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploi...

Vulnerability Description

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

CVSS Score

5.0

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
Git-ScmGit<= 2.15.1

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2018-1000021?

CVE-2018-1000021 is a vulnerability with a CVSS score of 5.0 (MEDIUM). GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploi...

How severe is CVE-2018-1000021?

CVE-2018-1000021 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-1000021?

Check the references section above for vendor advisories and patch information. Affected products include: Git-Scm Git.