Read the docs
TI-2024-34892 Aliases CVE-2024-52005

The sideband payload is passed unfiltered to the terminal in git

Priority LOW 35CWE-116Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Active
Attack complexity
High
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 6 fixed, 4 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.

Summary

Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the standard error output. Typically, this standard error output is connected to a terminal that understands ANSI escape sequences, which Git did not protect against. Most modern terminals support control sequences that can be used by a malicious actor to hide and misrepresent information, or to mislead the user into executing untrusted scripts. As requested on the git-security mailing list, the patches are under discussion on the public mailing list. Users are advised to update as soon as possible. Users unable to upgrade should avoid recursive clones unless they are from trusted sources.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00509 43rd percentileScored 2026-11-07
Fix Partial Red Hat: 6 advisoriesRed Hat: 6 fixed, 4 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Gitgit2.48.0 – 2.48.1; 2.47.0 – 2.47.1; 2.46.0 – 2.46.3; 2.45.0 – 2.45.3; 2.44.0 – 2.44.3; 2.43.0 – 2.43.6; 2.42.0 – 2.42.4; 2.41.0 – 2.41.3; up to 2.40.4—No fix listedCNA
  • git VendorGit Affected 2.48.0 – 2.48.1; 2.47.0 – 2.47.1; 2.46.0 – 2.46.3; 2.45.0 – 2.45.3; 2.44.0 – 2.44.3; 2.43.0 – 2.43.6; 2.42.0 – 2.42.4; 2.41.0 – 2.41.3; up to 2.40.4 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:git:git:*:*:*:*:*:*:*:*up to 2.40.4; 2.41.0 – 2.41.3; 2.42.0 – 2.42.4; 2.43.0 – 2.43.6; 2.44.0 – 2.44.3; 2.45.0 – 2.45.3; 2.46.0 – 2.46.3; 2.47.0 – 2.47.1; 2.48.0 – 2.48.1VulnerableGit
  • cpe:2.3:a:git:git:*:*:*:*:*:*:*:* Versions up to 2.40.4; 2.41.0 – 2.41.3; 2.42.0 – 2.42.4; 2.43.0 – 2.43.6; 2.44.0 – 2.44.3; 2.45.0 – 2.45.3; 2.46.0 – 2.46.3; 2.47.0 – 2.47.1; 2.48.0 – 2.48.1 Vulnerable ·Git

Remediation

Red Hat 6 advisories

  • RHSA-2025:8414 Released 2025-06-03 · Red Hat rating Moderate
    git security update
    • Red Hat Enterprise Linux AppStream (v. 8) git-2.43.5-3.el8_10, git-all-2.43.5-3.el8_10, git-core-2.43.5-3.el8_10 +12
  • RHSA-2025:8385 Released 2025-06-02 · Red Hat rating Moderate
    A Subscription Management tool for finding and reporting Red Hat product usage
    • Red Hat Discovery 1.14 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
  • RHSA-2025:7640 Released 2025-05-15 · Red Hat rating Moderate
    git security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) git-2.43.5-1.el9_4.1, git-all-2.43.5-1.el9_4.1, git-core-2.43.5-1.el9_4.1 +12
Show 3 more Red Hat advisories
  • RHSA-2025:7641 Released 2025-05-15 · Red Hat rating Moderate
    git security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) git-2.39.5-1.el9_2.1, git-all-2.39.5-1.el9_2.1, git-core-2.39.5-1.el9_2.1 +12
  • RHSA-2025:7482 Released 2025-05-13 · Red Hat rating Moderate
    git security update
    • Red Hat Enterprise Linux AppStream (v. 10) git-2.47.1-2.el10_0, git-all-2.47.1-2.el10_0, git-core-2.47.1-2.el10_0 +12
  • RHSA-2025:7409 Released 2025-05-13 · Red Hat rating Moderate
    git security update
    • Red Hat Enterprise Linux AppStream (v. 9) git-2.47.1-2.el9_6, git-all-2.47.1-2.el9_6, git-core-2.47.1-2.el9_6 +12

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Fuse 7AffectedNo fix planned: Out of support scope
Red Hat OpenShift Container Platform 4AffectedNo fix planned: Will not fix
Red Hat Discovery 1.14Fixed RHSA-2025:8385
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:7482
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:8414
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:7409
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2025:7641
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:7640
Not affected: 1 product
  • Red Hat Discovery 1.14

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-52005
  2. 2026-10-21 Affected versions changed · Red Hat
  3. 2026-10-22 Affected versions changed · Red Hat

References

Advisory 2

  • TI-2024-21101 Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution CVSS 3.1CRITICAL 9.1
  • TI-2020-04316 malicious URLs may cause Git to present stored credentials to the wrong server CVSS 3.1CRITICAL 9.3
  • TI-2022-09232 Command injection in git CVSS 3.1CRITICAL 9.8
  • TI-2008-05233 The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute… CVSS 2.0HIGH 7.5
  • TI-2008-05232 The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute… CVSS 2.0HIGH 7.5
  • TI-2008-03393 Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in… CVSS 2.0HIGH 7.5
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences