PT-2019-6385 · Microsoft+3 · Git For Visual Studio+3

Published 2019-12-10 · Updated 2024-06-15 · CVE-2019-1351

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Git for Visual Studio (affected versions not specified)

Description A tampering issue exists due to improper handling of virtual drive paths by Git for Visual Studio. This issue may allow a remote attacker to write arbitrary files to the system. The vulnerability is related to the use of an incorrect reference name.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-706

Related Identifiers

ALT-PU-2019-3258

ALT-PU-2019-3259

BDU:2023-06548

CVE-2019-1351

OPENSUSE-SU-2020:0123-1

OPENSUSE-SU-2020:0598-1

OPENSUSE-SU-2020_0123-1

OPENSUSE-SU-2020_0598-1

OPENSUSE-SU-2024:10786-1

OPENSUSE-SU-2024:10943-1

SUSE-SU-2019:3311-1

SUSE-SU-2020:0045-1

SUSE-SU-2020:1121-1

USN-4220-1

Affected Products

Alt Linux

Git For Visual Studio

Suse

Ubuntu

References · 90

• https://osv.dev/vulnerability/SUSE-SU-2020:0045-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1121-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19604 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06548 · Security Note
• https://ubuntu.com/security/CVE-2019-1350 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-1351 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1351 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1351 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2020:0598-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-1351 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4220-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2019-1351 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-1351 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4220-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-1354 · Vendor Advisory