CVE-2015-7545 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-7545 Interim 1 32 2025-11-05T04:43:01Z current 2021-05-30T13:33:53Z 2025-11-05T04:43:01Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-7545 The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2015-December/001744.html E-Mail link for SUSE-SU-2015:2325-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Tumbleweed git-1.8.5.6-15.1 git-arch-1.8.5.6-15.1 git-core-1.8.5.6-15.1 git-cvs-1.8.5.6-15.1 git-daemon-1.8.5.6-15.1 git-email-1.8.5.6-15.1 git-gui-1.8.5.6-15.1 git-svn-1.8.5.6-15.1 git-web-1.8.5.6-15.1 gitk-1.8.5.6-15.1 mercurial mercurial-4.0-1.1 mercurial-4.5.2-1.19 mercurial-5.9.1-150400.1.8 mercurial-5.9.1-150400.3.3.1 mercurial-5.9.1-150400.3.6.1 mercurial-7.0.1-160000.2.2 mercurial-lang-4.0-1.1 mercurial-lang-7.0.1-160000.2.2 mercurial-5.9.1-150400.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 mercurial-5.9.1-150400.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 mercurial-5.9.1-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 mercurial-5.9.1-150400.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 mercurial-4.5.2-1.19 as a component of SUSE Linux Enterprise Module for Development Tools 15 git-core-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Server 12 git-core-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Server 12 SP1 mercurial-7.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 mercurial-lang-7.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 git-core-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 git-core-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 git-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 git-arch-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 git-core-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 git-cvs-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 git-daemon-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 git-email-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 git-gui-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 git-svn-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 git-web-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 gitk-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 git-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-arch-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-core-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-cvs-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-daemon-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-email-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-gui-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-svn-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-web-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 gitk-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 git-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 git-arch-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 git-core-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 git-cvs-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 git-daemon-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 git-email-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 git-gui-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 git-svn-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 git-web-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gitk-1.8.5.6-15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 mercurial-4.0-1.1 as a component of openSUSE Tumbleweed mercurial-lang-4.0-1.1 as a component of openSUSE Tumbleweed mercurial as a component of SUSE CaaS Platform 4.0 mercurial as a component of SUSE Enterprise Storage 6 mercurial as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mercurial as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mercurial as a component of SUSE Linux Enterprise Module for Python 2 15 SP2 mercurial as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mercurial as a component of SUSE Linux Enterprise Server 15-ESPOS mercurial as a component of SUSE Linux Enterprise Server 15-LTSS mercurial as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 mercurial as a component of SUSE Linux Enterprise Server for SAP Applications 15 mercurial as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 mercurial as a component of SUSE Manager Proxy 4.0 mercurial as a component of SUSE Manager Retail Branch Server 4.0 mercurial as a component of SUSE Manager Server 4.0 The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule. CVE-2015-7545 SUSE Linux Enterprise Module for Basesystem 15 SP4:mercurial-5.9.1-150400.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP5:mercurial-5.9.1-150400.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP6:mercurial-5.9.1-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:mercurial-5.9.1-150400.3.6.1 SUSE Linux Enterprise Module for Development Tools 15:mercurial-4.5.2-1.19 SUSE Linux Enterprise Server 12:git-core-1.8.5.6-15.1 SUSE Linux Enterprise Server 12 SP1:git-core-1.8.5.6-15.1 SUSE Linux Enterprise Server 16.0:mercurial-7.0.1-160000.2.2 SUSE Linux Enterprise Server 16.0:mercurial-lang-7.0.1-160000.2.2 SUSE Linux Enterprise Server for SAP Applications 12:git-core-1.8.5.6-15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:git-core-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:git-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:git-arch-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:git-core-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:git-cvs-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:git-daemon-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:git-email-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:git-gui-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:git-svn-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:git-web-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12:gitk-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:git-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:git-arch-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:git-core-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:git-cvs-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:git-daemon-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:git-email-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:git-gui-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:git-svn-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:git-web-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP1:gitk-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:git-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:git-arch-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:git-core-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:git-cvs-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:git-daemon-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:git-email-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:git-gui-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:git-svn-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:git-web-1.8.5.6-15.1 SUSE Linux Enterprise Software Development Kit 12 SP5:gitk-1.8.5.6-15.1 openSUSE Tumbleweed:mercurial-4.0-1.1 openSUSE Tumbleweed:mercurial-lang-4.0-1.1 SUSE CaaS Platform 4.0:mercurial SUSE Enterprise Storage 6:mercurial SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:mercurial SUSE Linux Enterprise High Performance Computing 15-LTSS:mercurial SUSE Linux Enterprise Module for Python 2 15 SP2:mercurial SUSE Linux Enterprise Server 15 SP1-LTSS:mercurial SUSE Linux Enterprise Server 15-ESPOS:mercurial SUSE Linux Enterprise Server 15-LTSS:mercurial SUSE Linux Enterprise Server Business Critical Linux 15 SP1:mercurial SUSE Linux Enterprise Server for SAP Applications 15 SP1:mercurial SUSE Linux Enterprise Server for SAP Applications 15:mercurial SUSE Manager Proxy 4.0:mercurial SUSE Manager Retail Branch Server 4.0:mercurial SUSE Manager Server 4.0:mercurial moderate 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H