PT-2019-6385 · Microsoft+3 · Git For Visual Studio+3

Publicado 2019-12-10 · Atualizado 2024-06-15 · CVE-2019-1351

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Git for Visual Studio (affected versions not specified)

Description A tampering issue exists due to improper handling of virtual drive paths by Git for Visual Studio. This issue may allow a remote attacker to write arbitrary files to the system. The vulnerability is related to the use of an incorrect reference name.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-706

Identificadores relacionados

ALT-PU-2019-3258

ALT-PU-2019-3259

BDU:2023-06548

CVE-2019-1351

OPENSUSE-SU-2020:0123-1

OPENSUSE-SU-2020:0598-1

OPENSUSE-SU-2020_0123-1

OPENSUSE-SU-2020_0598-1

OPENSUSE-SU-2024:10786-1

OPENSUSE-SU-2024:10943-1

SUSE-SU-2019:3311-1

SUSE-SU-2020:0045-1

SUSE-SU-2020:1121-1

USN-4220-1

Produtos afetados

Alt Linux

Git For Visual Studio

Suse

Ubuntu

Referências · 90

• https://suse.com/security/cve/CVE-2019-19604 · Nota
• https://suse.com/security/cve/CVE-2019-1387 · Nota
• https://bugzilla.suse.com/1167890 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2020:0045-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-11235 · Nota
• https://suse.com/security/cve/CVE-2018-8098 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2020:1121-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1158789 · Nota
• https://suse.com/support/update/announcement/2020/suse-su-20201121-1 · Nota
• https://altsp.su/obnovleniya-bezopasnosti · Nota
• https://ubuntu.com/security/CVE-2019-19604 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-21300 · Nota
• https://bdu.fstec.ru/vul/2023-06548 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-1350 · Aviso do Fabricante
• https://bugzilla.suse.com/1156651 · Nota