CVE-2025-48385

Name
CVE-2025-48385
Description
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a bundle advertised by the remote server, which allows the server-side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles, which allows the remote side to perform protocol injection. This protocol injection can cause the client to write the fetched bundle to a location controlled by the adversary. The fetched content is fully controlled by the server, which can in the worst case lead to arbitrary code execution. The use of bundle URIs is not enabled by default and can be controlled by the bundle.heuristic config option. Some cases of the vulnerability require that the adversary is in control of where a repository will be cloned to. This either requires social engineering or a recursive clone with submodules. These cases can thus be avoided by disabling recursive clones. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.
NVD Severity
high
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
CONFIRM https://github.com/git/git/security/advisories/GHSA-m98c-vgpc-9655
af854a3a-2127-422b-91ae-364da2661108 http://www.openwall.com/lists/oss-security/2025/07/08/4

Match rules

CPE URI Source package Min version Max version
git >= 0 < 2.43.7
git >= 2.44.0-rc0 < 2.44.4
git >= 2.45.0-rc0 < 2.45.4
git >= 2.46.0-rc0 < 2.46.4
git >= 2.47.0-rc0 < 2.47.3
git >= 2.48.0-rc0 < 2.48.2
git >= 2.49.0-rc0 < 2.49.1
git >= 2.50.0-rc0 < 2.50.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
git edge-main 2.50.1-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
git edge-main 2.48.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.47.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.45.2-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.45.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.40.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.39.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.39.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.38.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.37.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.35.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.31.1-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git edge-main 2.30.2-r0 None possibly vulnerable
git edge-main 2.26.2-r0 None possibly vulnerable
git edge-main 2.26.1-r0 None possibly vulnerable
git edge-main 2.24.1-r0 None possibly vulnerable
git edge-main 2.19.1-r0 None possibly vulnerable
git edge-main 2.17.1-r0 None possibly vulnerable
git edge-main 2.14.1-r0 None possibly vulnerable
git edge-main 0 None possibly vulnerable
git 3.22-main 2.49.1-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
git 3.22-main 2.48.1-r0 None possibly vulnerable
git 3.22-main 2.45.1-r0 None possibly vulnerable
git 3.22-main 2.40.1-r0 None possibly vulnerable
git 3.22-main 2.39.2-r0 None possibly vulnerable
git 3.22-main 2.39.1-r0 None possibly vulnerable
git 3.22-main 2.38.1-r0 None possibly vulnerable
git 3.22-main 2.37.1-r0 None possibly vulnerable
git 3.22-main 2.35.2-r0 None possibly vulnerable
git 3.22-main 2.30.2-r0 None possibly vulnerable
git 3.22-main 2.26.2-r0 None possibly vulnerable
git 3.22-main 2.26.1-r0 None possibly vulnerable
git 3.22-main 2.24.1-r0 None possibly vulnerable
git 3.22-main 2.19.1-r0 None possibly vulnerable
git 3.22-main 2.17.1-r0 None possibly vulnerable
git 3.22-main 2.14.1-r0 None possibly vulnerable
git 3.22-main 0 None possibly vulnerable
git 3.21-main 2.47.3-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
git 3.21-main 2.47.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git 3.21-main 2.47.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git 3.21-main 2.45.1-r0 None possibly vulnerable
git 3.21-main 2.40.1-r0 None possibly vulnerable
git 3.21-main 2.39.2-r0 None possibly vulnerable
git 3.21-main 2.39.1-r0 None possibly vulnerable
git 3.21-main 2.38.1-r0 None possibly vulnerable
git 3.21-main 2.37.1-r0 None possibly vulnerable
git 3.21-main 2.35.2-r0 None possibly vulnerable
git 3.21-main 2.30.2-r0 None possibly vulnerable
git 3.21-main 2.26.2-r0 None possibly vulnerable
git 3.21-main 2.26.1-r0 None possibly vulnerable
git 3.21-main 2.24.1-r0 None possibly vulnerable
git 3.21-main 2.19.1-r0 None possibly vulnerable
git 3.21-main 2.17.1-r0 None possibly vulnerable
git 3.21-main 2.14.1-r0 None possibly vulnerable
git 3.21-main 0 None possibly vulnerable
git 3.20-main 2.45.4-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
git 3.20-main 2.45.3-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git 3.20-main 2.45.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git 3.20-main 2.45.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git 3.20-main 2.40.1-r0 None possibly vulnerable
git 3.20-main 2.39.2-r0 None possibly vulnerable
git 3.20-main 2.39.1-r0 None possibly vulnerable
git 3.20-main 2.38.1-r0 None possibly vulnerable
git 3.20-main 2.37.1-r0 None possibly vulnerable
git 3.20-main 2.35.2-r0 None possibly vulnerable
git 3.20-main 2.30.2-r0 None possibly vulnerable
git 3.20-main 2.26.2-r0 None possibly vulnerable
git 3.20-main 2.26.1-r0 None possibly vulnerable
git 3.20-main 2.24.1-r0 None possibly vulnerable
git 3.20-main 2.19.1-r0 None possibly vulnerable
git 3.20-main 2.17.1-r0 None possibly vulnerable
git 3.20-main 2.14.1-r0 None possibly vulnerable
git 3.20-main 0 None possibly vulnerable
git 3.19-main 2.43.7-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
git 3.19-main 2.43.6-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git 3.19-main 2.43.5-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git 3.19-main 2.43.4-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
git 3.19-main 2.40.1-r0 None possibly vulnerable
git 3.19-main 2.39.2-r0 None possibly vulnerable
git 3.19-main 2.39.1-r0 None possibly vulnerable
git 3.19-main 2.38.1-r0 None possibly vulnerable
git 3.19-main 2.37.1-r0 None possibly vulnerable
git 3.19-main 2.35.2-r0 None possibly vulnerable
git 3.19-main 2.30.2-r0 None possibly vulnerable
git 3.19-main 2.26.2-r0 None possibly vulnerable
git 3.19-main 2.26.1-r0 None possibly vulnerable
git 3.19-main 2.24.1-r0 None possibly vulnerable
git 3.19-main 2.19.1-r0 None possibly vulnerable
git 3.19-main 2.17.1-r0 None possibly vulnerable
git 3.19-main 2.14.1-r0 None possibly vulnerable
git 3.19-main 0 None possibly vulnerable