CVE-2014-9938 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2014-9938 Interim 1 16 2024-07-03T02:30:54Z current 2021-05-30T13:25:38Z 2024-07-03T02:30:54Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2014-9938 contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings Magnum Orchestration 7 SUSE Cloud 5 SUSE Liberty Linux 7 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Studio Onsite 1.3 emacs-git-1.8.3.1-11.el7 emacs-git-el-1.8.3.1-11.el7 git git-1.8.3.1-11.el7 git-all-1.8.3.1-11.el7 git-arch git-bzr-1.8.3.1-11.el7 git-core git-cvs git-cvs-1.8.3.1-11.el7 git-daemon git-daemon-1.8.3.1-11.el7 git-doc git-email git-email-1.8.3.1-11.el7 git-gui git-gui-1.8.3.1-11.el7 git-hg-1.8.3.1-11.el7 git-p4-1.8.3.1-11.el7 git-svn git-svn-1.8.3.1-11.el7 git-web gitk gitk-1.8.3.1-11.el7 gitweb-1.8.3.1-11.el7 perl-Git-1.8.3.1-11.el7 perl-Git-SVN-1.8.3.1-11.el7 emacs-git-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 emacs-git-el-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-all-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-bzr-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-cvs-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-daemon-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-email-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-gui-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-hg-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-p4-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git-svn-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 gitk-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 gitweb-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 perl-Git-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 perl-Git-SVN-1.8.3.1-11.el7 as a component of SUSE Liberty Linux 7 git as a component of Magnum Orchestration 7 git as a component of SUSE Cloud 5 git-core as a component of SUSE Linux Enterprise Server 12 SP1 git-doc as a component of SUSE Linux Enterprise Server 12 SP1 git as a component of SUSE Linux Enterprise Server 12 SP1 git-core as a component of SUSE Linux Enterprise Server 12 SP2 git-doc as a component of SUSE Linux Enterprise Server 12 SP2 git as a component of SUSE Linux Enterprise Server 12 SP2 git-core as a component of SUSE Linux Enterprise Server 12-LTSS git-doc as a component of SUSE Linux Enterprise Server 12-LTSS git as a component of SUSE Linux Enterprise Server 12-LTSS git as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 git-arch as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 git-core as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 git-cvs as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 git-daemon as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 git-email as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 git-gui as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 git-svn as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 git-web as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 gitk as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 git as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-arch as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-core as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-cvs as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-daemon as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-doc as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-email as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-gui as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-svn as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-web as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 gitk as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git-arch as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git-core as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git-cvs as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git-daemon as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git-doc as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git-email as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git-gui as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git-svn as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git-web as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 gitk as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 git as a component of SUSE Studio Onsite 1.3 git-core as a component of SUSE Studio Onsite 1.3 contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution. CVE-2014-9938 SUSE Liberty Linux 7:emacs-git-1.8.3.1-11.el7 SUSE Liberty Linux 7:emacs-git-el-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-all-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-bzr-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-cvs-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-daemon-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-email-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-gui-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-hg-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-p4-1.8.3.1-11.el7 SUSE Liberty Linux 7:git-svn-1.8.3.1-11.el7 SUSE Liberty Linux 7:gitk-1.8.3.1-11.el7 SUSE Liberty Linux 7:gitweb-1.8.3.1-11.el7 SUSE Liberty Linux 7:perl-Git-1.8.3.1-11.el7 SUSE Liberty Linux 7:perl-Git-SVN-1.8.3.1-11.el7 Magnum Orchestration 7:git SUSE Cloud 5:git SUSE Linux Enterprise Server 12 SP1:git SUSE Linux Enterprise Server 12 SP1:git-core SUSE Linux Enterprise Server 12 SP1:git-doc SUSE Linux Enterprise Server 12 SP2:git SUSE Linux Enterprise Server 12 SP2:git-core SUSE Linux Enterprise Server 12 SP2:git-doc SUSE Linux Enterprise Server 12-LTSS:git SUSE Linux Enterprise Server 12-LTSS:git-core SUSE Linux Enterprise Server 12-LTSS:git-doc SUSE Linux Enterprise Software Development Kit 11 SP4:git SUSE Linux Enterprise Software Development Kit 11 SP4:git-arch SUSE Linux Enterprise Software Development Kit 11 SP4:git-core SUSE Linux Enterprise Software Development Kit 11 SP4:git-cvs SUSE Linux Enterprise Software Development Kit 11 SP4:git-daemon SUSE Linux Enterprise Software Development Kit 11 SP4:git-email SUSE Linux Enterprise Software Development Kit 11 SP4:git-gui SUSE Linux Enterprise Software Development Kit 11 SP4:git-svn SUSE Linux Enterprise Software Development Kit 11 SP4:git-web SUSE Linux Enterprise Software Development Kit 11 SP4:gitk SUSE Linux Enterprise Software Development Kit 12 SP1:git SUSE Linux Enterprise Software Development Kit 12 SP1:git-arch SUSE Linux Enterprise Software Development Kit 12 SP1:git-core SUSE Linux Enterprise Software Development Kit 12 SP1:git-cvs SUSE Linux Enterprise Software Development Kit 12 SP1:git-daemon SUSE Linux Enterprise Software Development Kit 12 SP1:git-doc SUSE Linux Enterprise Software Development Kit 12 SP1:git-email SUSE Linux Enterprise Software Development Kit 12 SP1:git-gui SUSE Linux Enterprise Software Development Kit 12 SP1:git-svn SUSE Linux Enterprise Software Development Kit 12 SP1:git-web SUSE Linux Enterprise Software Development Kit 12 SP1:gitk SUSE Linux Enterprise Software Development Kit 12 SP2:git SUSE Linux Enterprise Software Development Kit 12 SP2:git-arch SUSE Linux Enterprise Software Development Kit 12 SP2:git-core SUSE Linux Enterprise Software Development Kit 12 SP2:git-cvs SUSE Linux Enterprise Software Development Kit 12 SP2:git-daemon SUSE Linux Enterprise Software Development Kit 12 SP2:git-doc SUSE Linux Enterprise Software Development Kit 12 SP2:git-email SUSE Linux Enterprise Software Development Kit 12 SP2:git-gui SUSE Linux Enterprise Software Development Kit 12 SP2:git-svn SUSE Linux Enterprise Software Development Kit 12 SP2:git-web SUSE Linux Enterprise Software Development Kit 12 SP2:gitk SUSE Studio Onsite 1.3:git SUSE Studio Onsite 1.3:git-core moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H