{"schemaVersion":3,"id":"USN-6793-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"git vulnerabilities\n\nIt was discovered that Git incorrectly handled certain submodules.\nAn attacker could possibly use this issue to execute arbitrary code.\nThis issue was fixed in Ubuntu 22.04 LTS, Ubuntu 23.10 and Ubuntu 24.04 LTS.\n(CVE-2024-32002)\n\nIt was discovered that Git incorrectly handled certain cloned repositories.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2024-32004)\n\nIt was discovered that Git incorrectly handled local clones with hardlinked\nfiles/directories. An attacker could possibly use this issue to place a\nspecialized repository on their target's local system. (CVE-2024-32020)\n\nIt was discovered that Git incorrectly handled certain symlinks. An attacker\ncould possibly use this issue to impact availability and integrity\ncreating hardlinked arbitrary files into users repository's objects/directory.\n(CVE-2024-32021)\n\nIt was discovered that Git incorrectly handled certain cloned repositories.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2024-32465)","dates":{"published":"2024-05-28T13:39:27.000Z","modified":"2026-02-10T04:43:49.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"git","name":"git","label":"git","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/git","purlType":"deb","versions":[{"text":"< 1:2.25.1-1ubuntu3.12","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.34.1-1ubuntu1.11","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.43.0-1ubuntu7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.25.1-1ubuntu3.12 | < 1:2.34.1-1ubuntu1.11 | < 1:2.43.0-1ubuntu7.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-6793-1","label":"ubuntu.com/security/notices/USN-6793-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-32002","label":"ubuntu.com/security/CVE-2024-32002","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-32004","label":"ubuntu.com/security/CVE-2024-32004","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-32020","label":"ubuntu.com/security/CVE-2024-32020","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-32021","label":"ubuntu.com/security/CVE-2024-32021","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-32465","label":"ubuntu.com/security/CVE-2024-32465","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2024-32002","CVE-2024-32004","CVE-2024-32020","CVE-2024-32021","CVE-2024-32465"],"downstream":[],"duplicates":[],"related":["CVE-2024-32002","CVE-2024-32004","CVE-2024-32020","CVE-2024-32021","CVE-2024-32465"]},"timeline":[{"kind":"published","date":"2024-05-28T13:39:27.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-10T04:43:49.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T13:36:24.254Z","stale":false,"partial":false}}