Summary
Joern Schneeweisz and Nicolas Joly discovered that Git contained various
security flaws. An attacker could possibly use these issues to overwrite
arbitrary paths, execute arbitrary code, and overwrite files in the .git
directory.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | git | 1:2.7.4-0ubuntu1.7 |
| Ubuntu · 18.04 LTS 18.04:LTS | git | 1:2.17.1-1ubuntu0.5 |
Vulnerabilities 8
-
Unscored —
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15…
-
Unscored —CVE-2019-1349 EPSS 34%
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual…
-
Unscored —CVE-2019-1350 EPSS 26%
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual…
-
Unscored —CVE-2019-1351 Public exploit
A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual…
-
Unscored —CVE-2019-1352 EPSS 24%
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual…
-
Unscored —
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15…
-
Unscored —CVE-2019-1354 EPSS 23%
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual…
-
Unscored —
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15…
References
-
report
https://ubuntu.com/security/CVE-2019-1348
-
report
https://ubuntu.com/security/CVE-2019-1349
-
report
https://ubuntu.com/security/CVE-2019-1350
-
report
https://ubuntu.com/security/CVE-2019-1351
-
report
https://ubuntu.com/security/CVE-2019-1352
-
report
https://ubuntu.com/security/CVE-2019-1353
-
report
https://ubuntu.com/security/CVE-2019-1354
-
report
https://ubuntu.com/security/CVE-2019-1387
-
report
https://ubuntu.com/security/CVE-2019-19604