Vulnerabilities

TI-2021-10181 CVE-2021-29468

Arbitrary code execution when checking out an attacker-controlled Git branch

MEDIUM 41

Cygwin Git is a patch set for the git command line tool for the cygwin environment.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0124 Published 2021-04-29 Fixed in 2.31.1-2 CWE-20

TI-2017-05165 CVE-2017-7523 · GHSA-vhqx-rr9r-7jww

Out-of-bounds write in Red Hat cygwin

LOW 38

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process r…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02746 Published 2017-07-21 No fix listed CWE-787

TI-2016-02567 CVE-2016-3067 · GHSA-q582-cxmf-6cxr

Cygwin before 2.5.0 does not properly handle updating permissions when changing users…

MEDIUM 46

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0204 Published 2017-04-21 No fix listed CWE-264

Vulnerabilities

Filters

Arbitrary code execution when checking out an attacker-controlled Git branch

Out-of-bounds write in Red Hat cygwin

Cygwin before 2.5.0 does not properly handle updating permissions when changing users…