Test ID:	1.3.6.1.4.1.25623.1.1.2.2022.2648
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-2648)
Summary:	The remote host is missing an update for the Huawei EulerOS 'git' package(s) announced via the EulerOS-SA-2022-2648 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'git' package(s) announced via the EulerOS-SA-2022-2648 advisory. Vulnerability Insight: Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when navigating as root into a shared tmp directory that is owned by them, but where an attacker could create a git repository. Versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5 contain a patch for this issue. The simplest way to avoid being affected by the exploit described in the example is to avoid running git as root (or an Administrator in Windows), and if needed to reduce its use to a minimum. While a generic workaround is not possible, a system could be hardened from the exploit described in the example by removing any such repository if it exists already and creating one as root to block any future attacks.(CVE-2022-29187) Affected Software/OS: 'git' package(s) on Huawei EulerOS V2.0SP10. Solution: Please install the updated package(s). CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-29187 https://github.com/git/git/security/advisories/GHSA-j342-m5hw-rr3v https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDI325LOO2XBDDKLINOAQJEG6MHAURZE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TRZG5CDUQ27OWTPC5MQOR4UASNXHWEZS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVOLER2PIGMHPQMDGG4RDE2KZB74QLA2/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UDZRZAL7QULOB6V7MKT66MOMWJLBJPX4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIKWISWUDFT2FAITYIA6372BVLH3OOOC/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YROCMBWYFKRSS64PO6FUNM6L7LKBUKVW/ http://seclists.org/fulldisclosure/2022/Nov/1 https://security.gentoo.org/glsa/202312-15 https://security.gentoo.org/glsa/202401-17 https://github.blog/2022-04-12-git-security-vulnerability-announced https://lore.kernel.org/git/xmqqv8s2fefi.fsf@gitster.g/T/#u https://lists.debian.org/debian-lts-announce/2022/12/msg00025.html http://www.openwall.com/lists/oss-security/2022/07/14/1
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.