8.2

CVE-2024-32004: debian debian_linux Process Control

CVSS: 8.2v3.1HighAnalyzed
AliasesALPINE-CVE-2024-32004RHSA-2024:7701UBUNTU-CVE-2024-32004
Published 14-05-2024Last modified 04-11-2025
Open JSON

Vulnerability summary

CVE-2024-32004 is a high (CVSS 8.2) Process Control vulnerability in debian debian_linux. EPSS estimates a 1.35% chance of exploitation in the next 30 days, higher than 71% of scored vulnerabilities.

Overall risk
33/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.2/10
010
High · v3.1 (CVE.org)
EPSS score
1.35%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 20 · Related 11
DLA-3844-1DLA-3867-1DSA-5769-1MGASA-2024-0204OPENSUSE-SU-2024:13968-1RHSA-2024:4083

Timeline

  1. 14-05-2024
    PublishedVulnerability first disclosed.
  2. 04-11-2025
    Last modifiedVulnerability information updated.

Description

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. As a workaround, avoid cloning repositories from untrusted sources.

CVSS metrics

8 scores · 8 sources · 1 version

EPSS trend

Probability

1.35%

Chance of exploitation in the next 30 days

Percentile

71%

Versus all other CVEs

30-day change

0.00 pp

From 1.35% on 18-09-2026

18-09-202618-10-2026
EPSS score
1.35%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat19 products
  • git< 0:2.18.4-5.el8_2
  • git-all< 0:2.18.4-5.el8_2
  • git-core< 0:2.18.4-5.el8_2
  • git-core-debuginfo< 0:2.18.4-5.el8_2
  • git-core-doc< 0:2.18.4-5.el8_2
Debian2 products
  • git< 1:2.39.5-0+deb12u1 | < 1:2.45.1-1
  • debian_linuxEOL10.0 | 11.0
Alpine1 product
  • git≥ 2.40.0, < 2.39.5-r0 | ≥ 2.40.0, < 2.40.3-r0 | ≥ 2.40.0, < 2.43.4-r0 | ≥ 2.40.0, < 2.45.1-r0
Chainguard1 product
  • git< 2.45.1-r0
Fedoraproject1 product
Git1 product
  • git= 2.45.0 | = 2.44.0 | ≥ 2.43.0, < 2.43.4 | ≥ 2.42.0, < 2.42.2 | = 2.41.0 | ≥ 2.40.0, < 2.40.2 | < 2.39.4
Git-scm1 product
  • git< 2.39.4 | ≥ 2.40.0, < 2.40.2 | ≥ 2.42.0, < 2.42.2 | ≥ 2.43.0, < 2.43.4 | 2.41.0 | 2.44.0 | 2.45.0
Ubuntu1 product
  • git< 1:2.17.1-1ubuntu0.18+esm1 | < 1:2.25.1-1ubuntu3.12 | < 1:2.34.1-1ubuntu1.11 | < 1:2.43.0-1ubuntu7.1
Wolfi1 product
  • git< 2.45.1-r0

9 vendors · 28 products

References

20 links
Show all 20 references