RHSA-2023:2357: git-lfs Red Hat

CVSS: 7.5v3.1HighPublished

Published 30-09-2024Last modified 16-10-2026

Open JSON

Vulnerability summary

RHSA-2023:2357 is a high (CVSS 7.5) vulnerability in git-lfs Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 10 · Downstream 0 · Related 1

CVE-2022-1705 CVE-2022-27664 CVE-2022-2880 CVE-2022-30630 CVE-2022-30632 CVE-2022-30635+4 more

Timeline

30-09-2024
PublishedVulnerability first disclosed.
16-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: git-lfs security and bug fix update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat3 products

git-lfs< 0:3.2.0-1.el9
git-lfs-debuginfo< 0:3.2.0-1.el9
git-lfs-debugsource< 0:3.2.0-1.el9

1 vendor · 3 products

References

63 links

Show all 63 references

bugzilla.redhat.com/show_bug.cgi?id=2132868REPORT
bugzilla.redhat.com/show_bug.cgi?id=2132872REPORT
bugzilla.redhat.com/show_bug.cgi?id=2139383REPORT
bugzilla.redhat.com/show_bug.cgi?id=2161274REPORT
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2357.jsonAdvisory
access.redhat.com/security/cve/CVE-2022-1705REPORT
www.cve.org/CVERecord?id=CVE-2022-1705Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1705Advisory
go.dev/issue/53188ARTICLE
groups.google.com/g/golang-announce/c/nqrv9fbR0zEARTICLE
access.redhat.com/security/cve/CVE-2022-2880REPORT
www.cve.org/CVERecord?id=CVE-2022-2880Advisory
nvd.nist.gov/vuln/detail/CVE-2022-2880Advisory
github.com/golang/go/issues/54663ARTICLE
groups.google.com/g/golang-announce/c/xtuG5faxtaU?pli=1ARTICLE
access.redhat.com/security/cve/CVE-2022-27664REPORT
www.cve.org/CVERecord?id=CVE-2022-27664Advisory
nvd.nist.gov/vuln/detail/CVE-2022-27664Advisory
go.dev/issue/54658ARTICLE
groups.google.com/g/golang-announce/c/x49AQzIVX-s/m/0tgO0pjiBQAJARTICLE
access.redhat.com/security/cve/CVE-2022-30630REPORT
www.cve.org/CVERecord?id=CVE-2022-30630Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30630Advisory
go.dev/issue/53415ARTICLE
access.redhat.com/security/cve/CVE-2022-30632REPORT
www.cve.org/CVERecord?id=CVE-2022-30632Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30632Advisory
go.dev/issue/53416ARTICLE
access.redhat.com/security/cve/CVE-2022-30635REPORT
www.cve.org/CVERecord?id=CVE-2022-30635Advisory
nvd.nist.gov/vuln/detail/CVE-2022-30635Advisory
go.dev/issue/53615ARTICLE
access.redhat.com/security/cve/CVE-2022-32148REPORT
www.cve.org/CVERecord?id=CVE-2022-32148Advisory
nvd.nist.gov/vuln/detail/CVE-2022-32148Advisory
go.dev/issue/53423ARTICLE
access.redhat.com/security/cve/CVE-2022-32189REPORT
www.cve.org/CVERecord?id=CVE-2022-32189Advisory
nvd.nist.gov/vuln/detail/CVE-2022-32189Advisory
go.dev/issue/53871ARTICLE
groups.google.com/g/golang-nuts/c/DCFSyTGM0wUARTICLE
access.redhat.com/security/cve/CVE-2022-41715REPORT
www.cve.org/CVERecord?id=CVE-2022-41715Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41715Advisory
github.com/golang/go/issues/55949ARTICLE
access.redhat.com/security/cve/CVE-2022-41717REPORT
www.cve.org/CVERecord?id=CVE-2022-41717Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41717Advisory
go.dev/cl/455635ARTICLE
go.dev/cl/455717ARTICLE
go.dev/issue/56350ARTICLE
groups.google.com/g/golang-announce/c/L_3rmdT0BMU/m/yZDrXjIiBQAJARTICLE
pkg.go.dev/vuln/GO-2022-1144Advisory