Remote Command Execution Vulnerability in git-annex: CVE-2017-12976
Summary
CVE-2017-12976: git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-201... Affects git-annex versions < 6.20170818-1. Fixed in 6.20170818-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
git-annex is a tool that allows users to manage files with Git without checking the file contents into Git. It is particularly useful for handling large files and datasets. The package is widely used in various environments, including personal projects and collaborative settings. However, it has a critical vulnerability that allows remote attackers to execute arbitrary commands through specially crafted SSH URLs.
Vulnerability Detail
CVE-2017-12976 is a vulnerability in git-annex prior to version 6.20170818 that allows remote attackers to execute arbitrary commands via an SSH URL that begins with a dash character in the hostname. This can lead to unauthorized command execution on the host system, potentially compromising sensitive data and system integrity. The vulnerability is related to other issues such as CVE-2017-9800 and CVE-2017-12836, indicating a broader concern with SSH URL handling in the software.
How To Fix
Minimum fixed version
6.20170818-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade git-annexTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using SSH URLs that start with a dash character in the hostname until the software can be updated. This can help mitigate the risk of exploitation while waiting for a patch.
Conclusion
CVE-2017-12976 is a significant vulnerability in git-annex that poses a risk of remote command execution. Users are strongly advised to upgrade to the latest version to mitigate this risk. Additionally, employing tools like Vulert can help in monitoring and managing vulnerabilities in open-source software.
See every vulnerability recorded for git-annex →
FAQ
CVE-2017-12976 is a vulnerability in git-annex that allows remote command execution through specially crafted SSH URLs.
You can check your version of git-annex by running 'git-annex version' in your terminal. If it is below 6.20170818, it is vulnerable.
Exploitation of this vulnerability could lead to unauthorized command execution, data breaches, and system compromise.
Yes, you can use tools like Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json.
More information can be found in the official CVE database or by visiting the vulnerability's page on the Vulert platform.
References
Related vulnerabilities
Recent vulnerabilities recorded for git-annex.
