Fixed
Created: Jun 14, 2017
Updated: May 29, 2018
Resolved Date: Aug 10, 2017
Found In Version: 9.0.0.7
Fix Version: 9.0.0.8
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.
https://nvd.nist.gov/vuln/detail/CVE-2017-8386