Is CVE-2024-52006 in the CISA KEV catalog?

No. CVE-2024-52006 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-52006?

CVE-2024-52006 has a CVSS v3 base score of 7.5 (HIGH).

What is the EPSS score for CVE-2024-52006?

CVE-2024-52006 has an EPSS score of 1.04% (60th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-52006?

Upgrade git on debian 11 to 1:2.30.2-1+deb11u4 or later. Fixes are available for 43 affected products.

CVE & CISA-KEV Catalog

CVE-2024-52006

HIGH

7.5

CVSS v3

NVD

Description

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems (most notably, .NET and node.js) interpret single Carriage Return characters as newlines, which renders the protections against CVE-2020-5260 incomplete for credential helpers that treat Carriage Returns in this way. This issue has been addressed in commit `b01b9b8` which is included in release versions v2.48.1, v2.47.2, v2.46.3, v2.45.3, v2.44.3, v2.43.6, v2.42.4, v2.41.3, and v2.40.4. Users are advised to upgrade. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones.

CWE-116 CWE-147 CWE-150

How to fix

Remediation Available

gitDebian

Fixed in:1:2.30.2-1+deb11u4CVE-2024-52006

Fixed in:1:2.39.5-0+deb12u2CVE-2024-52006

Fixed in:1:2.47.2-0.1CVE-2024-52006

gitRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

gitRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-allRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-allRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-coreRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-coreRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-core-debuginfoRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-core-debuginfoRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-core-docRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-core-docRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-credential-libsecretRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-credential-libsecretRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-credential-libsecret-debuginfoRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-credential-libsecret-debuginfoRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-daemonRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-daemonRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-daemon-debuginfoRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-daemon-debuginfoRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-debuginfoRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-debuginfoRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-debugsourceRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-debugsourceRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-emailRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-emailRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-guiRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-guiRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-instawebRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-instawebRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-subtreeRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-subtreeRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-svnRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

git-svnRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

gitkRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

gitkRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

gitwebRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

gitwebRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

perl-GitRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

perl-GitRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

perl-Git-SVNRocky

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

perl-Git-SVNRed Hat / RHEL

Fixed in:0:2.47.3-1.el10_0RHSA-2025:11533

Fixed in:0:2.43.7-1.el8_10RHSA-2025:11534

Fixed in:0:2.47.3-1.el9_6RHSA-2025:11462

gitUbuntu

Fixed in:1:2.7.4-0ubuntu1.10+esm13USN-7964-1

Fixed in:1:2.17.1-1ubuntu0.18+esm6USN-7964-1

Fixed in:1:2.25.1-1ubuntu3.14USN-7207-2

Fixed in:1:2.34.1-1ubuntu1.12USN-7207-1

Fixed in:1:2.43.0-1ubuntu7.2USN-7207-1

GitWindows application

Affected:2.40.4Fixed in:2.40.4The Git Development Community

Affected:2.47.0 2.47.2Fixed in:2.47.2The Git Development Community

Affected:2.41.0 2.41.3Fixed in:2.41.3The Git Development Community

Affected:2.43.0 2.43.6Fixed in:2.43.6The Git Development Community

Affected:2.46.3 2.46.3Fixed in:2.46.3The Git Development Community

Affected:2.45.3 2.45.3Fixed in:2.45.3The Git Development Community

Affected:2.44.3 2.44.3Fixed in:2.44.3The Git Development Community

Affected:2.42.0 2.42.4Fixed in:2.42.4The Git Development Community

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploit Intelligence

1.04%probability of exploitation in 30 days

60thpercentile

Moderate risk: more likely to be exploited than 60% of all known CVEs.

References

Patch2

Third-Party Advisory1

lists.debian.org

Other references2

Related Vulnerabilities

Other CWE-116 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2024-38475	Critical	9.1	100%	KEV	Fix
CVE-2022-36446	Critical	9.8	96%	-	Fix
CVE-2021-31806	Medium	6.5	96%	-	Fix
CVE-2022-30781	High	7.5	88%	-	Fix
CVE-2022-36099	Critical	9.9	76%	-	Fix
CVE-2022-36100	Critical	9.9	74%	-	Fix

Embed a live status badge for CVE-2024-52006

Markdown

[![CVE-2024-52006](https://tridentstack.com/cve/badge/CVE-2024-52006.svg)](https://tridentstack.com/cve/CVE-2024-52006)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-52006"><img src="https://tridentstack.com/cve/badge/CVE-2024-52006.svg" alt="CVE-2024-52006"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it works Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-12-18.