Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

RHSA-2023:3245 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceRHSA-2023:3245

RHSA-2023:3245

HIGH7.8

Red Hat Security Advisory: git security update

Published Sep 16, 2024

Modified 1 months ago

Fix available

Affected Packages(20 packages)

git

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

git-all

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

git-core

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

git-core-debuginfo

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

git-core-doc

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

git-credential-libsecret

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

git-credential-libsecret-debuginfo

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

git-daemon

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

git-daemon-debuginfo

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

git-debuginfo

RHEL 9

Fixed in:

0:2.39.3-1.el9_2

References(26)

https://access.redhat.com/errata/RHSA-2023:3245

https://access.redhat.com/security/cve/CVE-2023-22490

https://access.redhat.com/security/cve/CVE-2023-23946

https://access.redhat.com/security/cve/CVE-2023-25652

https://access.redhat.com/security/cve/CVE-2023-25815

https://access.redhat.com/security/cve/CVE-2023-29007

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=2168160

https://bugzilla.redhat.com/show_bug.cgi?id=2168161

https://bugzilla.redhat.com/show_bug.cgi?id=2188333

https://bugzilla.redhat.com/show_bug.cgi?id=2188337

https://bugzilla.redhat.com/show_bug.cgi?id=2188338

https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/

https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q

https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh

https://nvd.nist.gov/vuln/detail/CVE-2023-22490

https://nvd.nist.gov/vuln/detail/CVE-2023-23946

https://nvd.nist.gov/vuln/detail/CVE-2023-25652

https://nvd.nist.gov/vuln/detail/CVE-2023-25815

https://nvd.nist.gov/vuln/detail/CVE-2023-29007

https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3245.json

https://www.cve.org/CVERecord?id=CVE-2023-22490

https://www.cve.org/CVERecord?id=CVE-2023-23946

https://www.cve.org/CVERecord?id=CVE-2023-25652

https://www.cve.org/CVERecord?id=CVE-2023-25815

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Upstream

CVE-2023-22490 CVE-2023-23946 CVE-2023-25652 CVE-2023-25815 CVE-2023-29007

Ecosystems

Timeline

PublishedSep 16, 2024

ModifiedFeb 26, 2026