PT-2019-5025 · Git+5 · Git+5

Nicolas Joly · Publicado 2019-12-10 · Atualizado 2024-06-15 · CVE-2019-1349

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Git (affected versions not specified)

Description The vulnerability in the recursive submodule cloning component of the distributed version control system Git is related to an insufficient input validation mechanism. Exploitation of this issue may allow a remote attacker to gain unauthorized access to confidential data, cause a denial of service, and impact data integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2019-3258

ALT-PU-2019-3259

BDU:2020-01658

CESA-2019_4356

CVE-2019-1349

DLA-2059-1

DSA-4581-1

MGASA-2019-0393

OPENSUSE-SU-2020:0123-1

OPENSUSE-SU-2020:0598-1

OPENSUSE-SU-2020_0123-1

OPENSUSE-SU-2020_0598-1

OPENSUSE-SU-2024:10786-1

OPENSUSE-SU-2024:10943-1

RHSA-2019:4356

RHSA-2019_4356

RHSA-2020:0002

RHSA-2020:0228

SUSE-SU-2019:3311-1

SUSE-SU-2020:0045-1

SUSE-SU-2020:1121-1

USN-4220-1

Produtos afetados

Alt Linux

Centos

Git

Red Hat

Suse

Ubuntu

Referências · 104

• https://github.com/git/git/security/advisories/GHSA-4qvh-qvv7-frc7 · Nota
• https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com · Nota
• https://suse.com/security/cve/CVE-2018-17456 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-1000117 · Nota
• https://bugzilla.suse.com/1095218 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2019:3311-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-1349 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-1387 · Nota
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1349 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=25867 · Nota
• https://bugzilla.suse.com/1132350 · Nota
• https://osv.dev/vulnerability/USN-4220-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-1351 · Nota