Fixed
Created: Jun 14, 2017
Updated: Dec 3, 2018
Resolved Date: Aug 21, 2017
Found In Version: 6.0.0.33
Fix Version: 6.0.0.35
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.
https://nvd.nist.gov/vuln/detail/CVE-2017-8386
