ID CVE-2022-39260
Summary Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4, the function that splits the command arguments into an array improperly uses an `int` to represent the number of entries in the array, allowing a malicious actor to intentionally overflow the return value, leading to arbitrary heap writes. Because the resulting array is then passed to `execv()`, it is possible to leverage this attack to gain remote code execution on a victim machine. Note that a victim must first allow access to `git shell` as a login shell in order to be vulnerable to this attack. This problem is patched in versions 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 and users are advised to upgrade to the latest version. Disabling `git shell` access via remote logins is a viable short-term workaround.
References
Vulnerable Configurations
  • cpe:2.3:a:git-scm:git:2.38.0:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.38.0:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.37.4:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.37.4:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.36.0:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.36.0:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.36.1:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.36.1:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.36.2:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.36.2:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.35.0:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.35.0:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.35.0:rc0:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.35.0:rc0:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.35.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.35.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.35.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.35.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.35.1:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.35.1:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.35.2:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.35.2:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.35.3:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.35.3:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.35.4:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.35.4:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.34.0:rc0:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.34.0:rc0:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.34.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.34.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.34.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.34.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.34.2:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.34.2:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.34.3:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.34.3:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.34.4:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.34.4:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.33.0:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.33.0:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.33.0:rc0:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.33.0:rc0:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.33.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.33.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.33.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.33.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.33.1:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.33.1:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.33.2:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.33.2:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.33.3:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.33.3:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.33.4:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.33.4:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.32.0:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.32.0:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.32.0:rc0:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.32.0:rc0:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.32.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.32.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.32.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.32.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.32.0:rc3:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.32.0:rc3:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.32.1:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.32.1:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.32.2:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.32.2:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.32.3:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.32.3:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.32.4:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.32.4:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.31.0:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.31.0:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.31.0:rc0:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.31.0:rc0:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.31.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.31.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.31.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.31.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.31.1:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.31.1:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.31.2:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.31.2:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.31.3:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.31.3:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:2.31.4:*:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:2.31.4:*:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.3.0:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.3.0:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.4.0:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.4.0:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.4.1:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.4.1:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.4.2:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.4.2:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.4.3:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.4.3:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.4.4:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.4.4:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.5.0:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.5.0:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.5.1:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.5.1:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.5.2:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.5.2:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.5.3:-:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.5.3:-:*:*:*:*:*:*
  • cpe:2.3:a:git-scm:git:1.5.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:git-scm:git:1.5.5:rc1:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:-:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:-:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:1.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:1.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:2.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:2.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:2.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:2.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:2.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:2.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:2.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:2.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:2.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:2.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:2.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:2.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:3.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:3.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.4:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.5:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.6:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:4.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:4.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:5.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:5.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:5.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:5.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.2:beta_2:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.2:beta_2:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:6.4:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:7.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:7.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:7.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:7.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:7.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:7.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:7.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:7.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:7.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:7.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:7.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:8.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:8.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:8.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:8.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:8.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:8.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:8.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:8.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:8.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:8.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:8.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:8.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:9.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:9.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:9.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:9.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:9.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:9.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:9.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:9.4:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:9.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:9.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:10:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:10:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:11.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:11.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:11.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:11.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:11.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:11.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:12.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:12.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:12.4:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:12.4:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:12.5:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:12.5:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:12.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:12.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:13.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:13.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:13.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:13.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:13.2:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:13.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:13.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:13.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:13.3:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:13.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apple:xcode:14.0:*:*:*:*:*:*:*
    cpe:2.3:a:apple:xcode:14.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE CWE-122
CAPEC
  • Forced Integer Overflow
    This attack forces an integer variable to go out of range. The integer variable is often used as an offset such as size of memory allocation or similarly. The attacker would typically control the value of such variable and try to get it out of range. For instance the integer in question is incremented past the maximum possible value, it may wrap to become a very small, or negative number, therefore providing a very incorrect value which can lead to unexpected behavior. At worst the attacker can execute arbitrary code.
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 27-12-2023 - 10:15
Published 19-10-2022 - 12:15
Last modified 27-12-2023 - 10:15
Back to Top