« Volver al listado

CVE-2024-32002

Estado: ModificadaCrítica (9)—💥 PoC

Git es un sistema de control de revisiones. Antes de las versiones 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2 y 2.39.4, los repositorios con submódulos se podían manipular de manera que explotaran un error en Git mediante el cual se deja engañar y escribe archivos, no en el árbol de trabajo del submódulo, sino en un directorio `.git/`. Esto permite escribir un enlace que se ejecutará mientras la operación de clonación aún se está ejecutando, sin darle al usuario la oportunidad de inspeccionar el código que se está ejecutando.

Leer descripción completaMostrar menos

El problema se solucionó en las versiones 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2 y 2.39.4. Si la compatibilidad con enlaces simbólicos está deshabilitada en Git (por ejemplo, mediante `git config --global core.symlinks false`), el ataque descrito no funcionará. Como siempre, es mejor evitar clonar repositorios de fuentes que no sean de confianza.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

⚠️ Las pruebas de concepto de GitHub no están verificadas: algunas son falsas o contienen malware. No las ejecute nunca fuera de un laboratorio aislado.

Tecnologías afectadas (1)

GIT — GIT

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-32002",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-32002",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-05-29T14:18:00.384488Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2.2
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "git",
          "product": "git",
          "versions": [
            {
              "status": "affected",
              "version": "= 2.45.0"
            },
            {
              "status": "affected",
              "version": "= 2.44.0"
            },
            {
              "status": "affected",
              "version": ">= 2.43.0, < 2.43.4"
            },
            {
              "status": "affected",
              "version": ">= 2.42.0, < 2.42.2"
            },
            {
              "status": "affected",
              "version": "= 2.41.0"
            },
            {
              "status": "affected",
              "version": ">= 2.40.0, < 2.40.2"
            },
            {
              "status": "affected",
              "version": "< 2.39.4"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:git:git:2.45.0:*:*:*:*:*:*:*"
          ],
          "vendor": "git",
          "product": "git",
          "versions": [
            {
              "status": "affected",
              "version": "2.45.0"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:git:git:2.44.0:*:*:*:*:*:*:*"
          ],
          "vendor": "git",
          "product": "git",
          "versions": [
            {
              "status": "affected",
              "version": "2.44.0"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:git:git:2.43:*:*:*:*:*:*:*"
          ],
          "vendor": "git",
          "product": "git",
          "versions": [
            {
              "status": "affected",
              "version": "2.43",
              "lessThan": "2.43.4",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:git:git:2.42.0:*:*:*:*:*:*:*"
          ],
          "vendor": "git",
          "product": "git",
          "versions": [
            {
              "status": "affected",
              "version": "2.42.0",
              "lessThan": "2.42.2",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:git:git:2.41.0:*:*:*:*:*:*:*"
          ],
          "vendor": "git",
          "product": "git",
          "versions": [
            {
              "status": "affected",
              "version": "2.41.0"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:git:git:2.40.0:*:*:*:*:*:*:*"
          ],
          "vendor": "git",
          "product": "git",
          "versions": [
            {
              "status": "affected",
              "version": "2.40.0",
              "lessThan": "2.40.2",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:git:git:*:*:*:*:*:*:*:*"
          ],
          "vendor": "git",
          "product": "git",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2.39.4",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-05-14T19:15:10.810",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/05/14/2",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://git-scm.com/docs/git-clone#Documentation/git-clone.txt---recurse-submodulesltpathspecgt",
      "tags": [
        "Not Applicable"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://git-scm.com/docs/git-config#Documentation/git-config.txt-coresymlinks",
      "tags": [
        "Not Applicable"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/git/git/commit/97065761333fd62db1912d81b489db938d8c991d",
      "tags": [
        "Patch"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/git/git/security/advisories/GHSA-8h77-4q3w-gfgv",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/",
      "source": "security-advisories@github.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/05/14/2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://git-scm.com/docs/git-clone#Documentation/git-clone.txt---recurse-submodulesltpathspecgt",
      "tags": [
        "Not Applicable"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://git-scm.com/docs/git-config#Documentation/git-config.txt-coresymlinks",
      "tags": [
        "Not Applicable"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/git/git/commit/97065761333fd62db1912d81b489db938d8c991d",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/git/git/security/advisories/GHSA-8h77-4q3w-gfgv",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00009.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S4CK4IYTXEOBZTEM5K3T6LWOIZ3S44AR/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        },
        {
          "lang": "en",
          "value": "CWE-434"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources."
    },
    {
      "lang": "es",
      "value": "Git es un sistema de control de revisiones. Antes de las versiones 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2 y 2.39.4, los repositorios con submódulos se podían manipular de manera que explotaran un error en Git mediante el cual se deja engañar y escribe archivos, no en el árbol de trabajo del submódulo, sino en un directorio `.git/`. Esto permite escribir un enlace que se ejecutará mientras la operación de clonación aún se está ejecutando, sin darle al usuario la oportunidad de inspeccionar el código que se está ejecutando. El problema se solucionó en las versiones 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2 y 2.39.4. Si la compatibilidad con enlaces simbólicos está deshabilitada en Git (por ejemplo, mediante `git config --global core.symlinks false`), el ataque descrito no funcionará. Como siempre, es mejor evitar clonar repositorios de fuentes que no sean de confianza."
    }
  ],
  "lastModified": "2026-06-17T07:29:06.130",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:git:git:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67C50136-86FF-4BCF-B21F-5F09947CF6AC",
              "versionEndExcluding": "2.39.4"
            },
            {
              "criteria": "cpe:2.3:a:git:git:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28F0EBE5-AAB1-4BC8-B3CA-5F0B3D71642B",
              "versionEndExcluding": "2.40.2",
              "versionStartIncluding": "2.40.0"
            },
            {
              "criteria": "cpe:2.3:a:git:git:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "790B191F-6DD7-4F0A-96BD-BAD5CF3F2081",
              "versionEndExcluding": "2.42.2",
              "versionStartIncluding": "2.42.0"
            },
            {
              "criteria": "cpe:2.3:a:git:git:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14C6890A-11D9-46CD-AF1D-85FAF61A0AA8",
              "versionEndExcluding": "2.43.4",
              "versionStartIncluding": "2.43.0"
            },
            {
              "criteria": "cpe:2.3:a:git:git:2.41.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09120A06-22E2-45A6-93B3-913DB7F52788"
            },
            {
              "criteria": "cpe:2.3:a:git:git:2.44.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A641AB1F-0712-43F6-B7D6-E19D1D88D3C3"
            },
            {
              "criteria": "cpe:2.3:a:git:git:2.45.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E742D5F-55D2-47D7-A3CC-C359A4555E7E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-advisories@github.com"
}