PT-2019-5024 · Git+5 · Git+5

Nicolas Joly

·

Publicado

2019-12-10

·

Atualizado

2024-06-15

·

CVE-2019-1352

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Git (affected versions not specified)
Description The issue is related to a component that handles NTFS Alternate Data Streams in the distributed version control system Git. It is caused by an insufficient input validation mechanism. Exploitation of this issue could allow a remote attacker to gain unauthorized access to confidential data, cause a denial of service, and impact data integrity.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2019-3258
ALT-PU-2019-3259
BDU:2020-01657
CESA-2019_4356
CVE-2019-1352
DLA-2059-1
DLA-2936-1
DSA-4581-1
OPENSUSE-SU-2020:0123-1
OPENSUSE-SU-2020:0598-1
OPENSUSE-SU-2020_0123-1
OPENSUSE-SU-2020_0598-1
OPENSUSE-SU-2022_3495-1
OPENSUSE-SU-2024:10786-1
OPENSUSE-SU-2024:10943-1
RHSA-2019:4356
RHSA-2019_4356
RHSA-2020:0002
RHSA-2020:0228
SUSE-SU-2019:3311-1
SUSE-SU-2020:0045-1
SUSE-SU-2020:1121-1
SUSE-SU-2022:3495-1
SUSE-SU-2022_3495-1
USN-4220-1

Produtos afetados

Alt Linux
Centos
Git
Red Hat
Suse
Ubuntu