p PatchFirst

CVE-2022-24765

CVE-2022-24765 · Uncontrolled search for the Git directory in Git for Windows

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder `C:\.git`, which would be picked up by Git operations run supposedly outside a repository while searching for a Git directory. Git would then respect any config in said Git directory. Git Bash users who set `GIT_PS1_SHOWDIRTYSTATE` are vulnerable as well. Users who installed posh-gitare vulnerable simply by starting a PowerShell. Users of IDEs such as Visual Studio are vulnerable: simply creating a new project would already read and respect the config specified in `C:\.git\config`. Users of the Microsoft fork of Git are vulnerable simply by starting a Git Bash. The problem has been patched in Git for Windows v2.35.2. Users unable to upgrade may create the folder `.git` on all drives where Git commands are run, and remove read/write access from those folders as a workaround. Alternatively, define or extend `GIT_CEILING_DIRECTORIES` to cover the _parent_ directory of the user profile, e.g. `C:\Users` if the user profile is located in `C:\Users\my-user-name`.

CVSS 6.0 · Medium · EPSS 1.0% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • git

    Versions
    • < 2.35.2: Affected

    No fix published

  • git Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:2.35.2-1

    Update to 1:2.35.2-1

  • git Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:2.35.2-1

    Update to 1:2.35.2-1

  • git Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:2.35.2-1

    Update to 1:2.35.2-1

  • git Ubuntu:18.04:LTS

    Versions
    • 1:2.14.1-1ubuntu4
    • 1:2.15.1-1ubuntu2
    • 1:2.17.0-1ubuntu1
    • 1:2.17.1-1ubuntu0.1
    • 1:2.17.1-1ubuntu0.3
    • 1:2.17.1-1ubuntu0.4
    • 1:2.17.1-1ubuntu0.5
    • 1:2.17.1-1ubuntu0.6
    • 1:2.17.1-1ubuntu0.7
    • 1:2.17.1-1ubuntu0.8
    • 1:2.17.1-1ubuntu0.9
    • 1:2.17.1-1ubuntu0.10
    Affected ranges
    • ECOSYSTEM: < 1:2.17.1-1ubuntu0.11

    Update to 1:2.17.1-1ubuntu0.11

  • git Ubuntu:20.04:LTS

    Versions
    • 1:2.20.1-2ubuntu1
    • 1:2.24.0-1ubuntu1
    • 1:2.24.0-1ubuntu2
    • 1:2.25.0-1ubuntu1
    • 1:2.25.1-1ubuntu1
    • 1:2.25.1-1ubuntu2
    • 1:2.25.1-1ubuntu3
    • 1:2.25.1-1ubuntu3.1
    • 1:2.25.1-1ubuntu3.2
    • 1:2.25.1-1ubuntu3.3
    Affected ranges
    • ECOSYSTEM: < 1:2.25.1-1ubuntu3.4

    Update to 1:2.25.1-1ubuntu3.4

  • git Ubuntu:22.04:LTS

    Versions
    • 1:2.32.0-1ubuntu1
    • 1:2.33.1-1ubuntu1
    • 1:2.34.1-1ubuntu1
    • 1:2.34.1-1ubuntu1.1
    Affected ranges
    • ECOSYSTEM: < 1:2.34.1-1ubuntu1.2

    Update to 1:2.34.1-1ubuntu1.2

Original sources

Check your server →