Moderate Security Vulnerability in Git: Unfiltered Sideband Payload Exposure
Summary
RLSA-2025:7409: Moderate: git security update. Affects git versions < 0:2.47.1-2.el9_6. Fixed in 0:2.47.1-2.el9_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Git is a distributed revision control system that allows users to track changes in source code during software development. Its decentralized architecture enables each working copy of a repository to contain the full history of changes, facilitating offline work and collaboration without needing centralized permissions. However, this flexibility also introduces potential security risks, such as the one identified in CVE-2024-52005, where unfiltered sideband payloads can be passed to the terminal.
Vulnerability Detail
The vulnerability arises from the way Git handles sideband payloads, which are passed unfiltered to the terminal. This could allow an attacker to execute arbitrary commands or expose sensitive information through the terminal interface. The potential ramifications include unauthorized access to system resources and data leakage, making it critical for users to address this issue promptly.
How To Fix
Minimum fixed version
0:2.47.1-2.el9_6
This is the first release that contains the fix.
sudo dnf update gitTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the use of Git commands that may expose the terminal to unfiltered sideband payloads until the update is applied. However, the best course of action is to update to the patched version as soon as possible.
Conclusion
The identified vulnerability in Git, CVE-2024-52005, poses a significant risk due to the unfiltered passing of sideband payloads to the terminal. Users are strongly advised to update to the patched version to mitigate potential security threats. For real-time monitoring of open-source vulnerabilities, consider using Vulert, which can analyze your manifest files without requiring code access.
See every vulnerability recorded for git →
FAQ
CVE-2024-52005 is a security vulnerability in Git that allows unfiltered sideband payloads to be passed to the terminal, potentially leading to unauthorized command execution.
The vulnerability has a CVSS score of 7.5, indicating a moderate level of severity that requires prompt attention.
You can check your Git version by running 'git --version' in your terminal. If it is below 0:2.47.1-2.el9_6, it is vulnerable.
If an immediate update is not possible, limit the use of Git commands that may expose the terminal to unfiltered payloads as a temporary workaround.
More details can be found on the CVE page associated with CVE-2024-52005, which provides insights into the impact and acknowledgments related to this security issue.
Related vulnerabilities
Recent vulnerabilities recorded for git.
