{"schemaVersion":3,"id":"USN-7207-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"git vulnerabilities\n\nIt was discovered that Git incorrectly handled certain URLs when\nasking for credentials. An attacker could possibly use this\nissue to mislead the user into typing passwords for trusted\nsites that would then be sent to untrusted sites instead.\n(CVE-2024-50349)\n\nIt was discovered that git incorrectly handled line endings when\nusing credential helpers. (CVE-2024-52006)","dates":{"published":"2025-01-14T19:55:30.000Z","modified":"2026-02-10T04:46:29.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"git","name":"git","label":"git","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/git","purlType":"deb","versions":[{"text":"< 1:2.34.1-1ubuntu1.12","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.43.0-1ubuntu7.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.34.1-1ubuntu1.12 | < 1:2.43.0-1ubuntu7.2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7207-1","label":"ubuntu.com/security/notices/USN-7207-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-50349","label":"ubuntu.com/security/CVE-2024-50349","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-52006","label":"ubuntu.com/security/CVE-2024-52006","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2024-50349","CVE-2024-52006"],"downstream":[],"duplicates":[],"related":["CVE-2024-50349","CVE-2024-52006"]},"timeline":[{"kind":"published","date":"2025-01-14T19:55:30.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-10T04:46:29.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:24:03.650Z","stale":false,"partial":false}}