CVE-2023-25652

"git apply --reject" partially-controlled arbitrary file write

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch). A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid using `git apply` with `--reject` when applying patches from an untrusted source. Use `git apply --stat` to inspect a patch before applying; avoid applying one that create a conflict where a link corresponding to the `*.rej` file exists.

A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.

Red Hat Advanced Cluster Management for Kubernetes 2.7.4 images Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which fix several bugs.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Complete

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2023-02-09 CVE Reserved
2023-04-25 CVE Published
2025-02-13 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (12)

URL	Tag	Source
http://www.openwall.com/lists/oss-security/2023/04/25/2	Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BSXOGVVBJLYX26IAYX6PJSYQB36BREWH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7	Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL	Mailing List
https://security.gentoo.org/glsa/202312-15
https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html

URL	Date	SRC

URL	Date	SRC
https://github.com/git/git/commit/18e2b1cfc80990719275d7b08e6e50f3e8cbc902	2023-12-27
https://github.com/git/git/commit/668f2d53613ac8fd373926ebe219f2c29112d93e	2023-12-27

URL	Date	SRC
https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx	2023-12-27
https://access.redhat.com/security/cve/CVE-2023-25652	2023-05-31
https://bugzilla.redhat.com/show_bug.cgi?id=2188333	2023-05-31

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				< 2.30.9 Search vendor "Git-scm" for product "Git" and version " < 2.30.9"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				>= 2.31.0 < 2.31.8 Search vendor "Git-scm" for product "Git" and version " >= 2.31.0 < 2.31.8"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				>= 2.32.0 < 2.32.7 Search vendor "Git-scm" for product "Git" and version " >= 2.32.0 < 2.32.7"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				>= 2.33.0 < 2.33.8 Search vendor "Git-scm" for product "Git" and version " >= 2.33.0 < 2.33.8"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				>= 2.34.0 < 2.34.8 Search vendor "Git-scm" for product "Git" and version " >= 2.34.0 < 2.34.8"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				>= 2.35.0 < 2.35.8 Search vendor "Git-scm" for product "Git" and version " >= 2.35.0 < 2.35.8"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				>= 2.36.0 < 2.36.6 Search vendor "Git-scm" for product "Git" and version " >= 2.36.0 < 2.36.6"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				>= 2.37.0 < 2.37.7 Search vendor "Git-scm" for product "Git" and version " >= 2.37.0 < 2.37.7"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				>= 2.38.0 < 2.38.5 Search vendor "Git-scm" for product "Git" and version " >= 2.38.0 < 2.38.5"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				>= 2.39.0 < 2.39.3 Search vendor "Git-scm" for product "Git" and version " >= 2.39.0 < 2.39.3"		-		Affected
Git-scm Search vendor "Git-scm"		Git Search vendor "Git-scm" for product "Git"				2.40.0 Search vendor "Git-scm" for product "Git" and version "2.40.0"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				37 Search vendor "Fedoraproject" for product "Fedora" and version "37"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				38 Search vendor "Fedoraproject" for product "Fedora" and version "38"		-		Affected