CVE Feed

    Dashboard / CVE / CVE-2010-2542

    CVE-2010-2542

    Stack-based buffer overflow in the is_git_directory function in setup.c in Git before 1.7.2.1 allows local users to gain privileges via a long gitdir: field in a .git file in a working copy.

    Published:Jul 20, 2010
    Last Modified:Apr 11, 2025
    EPS:Aug 11, 2010
    EPSS Score:0.0166
    CVSS Score:7.5

    Affected Products

    Vendor
    Git-scm
    Product
    Git

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-48384 (CVSS 8) — Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides …
    CVE-2024-32004 (CVSS 8.1) — Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4…
    CVE-2024-32021 (CVSS 3.9) — Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4…
    CVE-2024-32020 (CVSS 3.9) — Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4…
    CVE-2024-32465 (CVSS 7.3) — Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and i…
    CVE-2023-25652 (CVSS 7.5) — Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.…
    CVE-2023-29007 (CVSS 7) — Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.…
    CVE-2023-23946 (CVSS 6.2) — Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36…
    CVE-2023-22490 (CVSS 5.5) — Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, …
    CVE-2022-41953 (CVSS 8.6) — Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are u…

    References

    http://git.kernel.org/?p=git/git.git%3Ba=commit%3Bh=3c9d0414ed2db0167e6c828b547be8fc9f88fccc
    http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
    http://secunia.com/advisories/43457
    http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.7.2.1.txt
    http://www.openwall.com/lists/oss-security/2010/07/22/1
    http://www.openwall.com/lists/oss-security/2010/07/22/4
    http://www.securityfocus.com/bid/41891
    http://www.vupen.com/english/advisories/2011/0464
    https://bugzilla.redhat.com/show_bug.cgi?id=618108
    http://git.kernel.org/?p=git/git.git%3Ba=commit%3Bh=3c9d0414ed2db0167e6c828b547be8fc9f88fccc
    http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00004.html
    http://secunia.com/advisories/43457
    http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.7.2.1.txt
    http://www.openwall.com/lists/oss-security/2010/07/22/1
    http://www.openwall.com/lists/oss-security/2010/07/22/4
    http://www.securityfocus.com/bid/41891
    http://www.vupen.com/english/advisories/2011/0464
    https://bugzilla.redhat.com/show_bug.cgi?id=618108

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High