Lucene search

PRIOn knowledge basePRION:CVE-2019-1387

HistoryDec 18, 2019 - 9:15 p.m.

Remote code execution

2019-12-1821:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.087 Low

EPSS

Percentile

94.6%

JSON

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones.

CPENameOperatorVersion
gitge2.14.0
gitlt2.14.6
gitge2.15.0
gitlt2.15.4
gitge2.16.0
gitlt2.16.6
gitge2.17.0
gitlt2.17.3
gitge2.18.0
gitlt2.18.2

Name	Operator	Version
git	ge	2.14.0
git	lt	2.14.6
git	ge	2.15.0
git	lt	2.15.4
git	ge	2.16.0
git	lt	2.16.6
git	ge	2.17.0
git	lt	2.17.3
git	ge	2.18.0
git	lt	2.18.2

Rows per page:

1-10 of 191

References

lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html

lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html

access.redhat.com/errata/RHSA-2019:4356

access.redhat.com/errata/RHSA-2020:0002

access.redhat.com/errata/RHSA-2020:0124

access.redhat.com/errata/RHSA-2020:0228

lists.debian.org/debian-lts-announce/2020/01/msg00019.html

lists.fedoraproject.org/archives/list/[email protected]/message/N6UGTEOXWIYSM5KDZL74QD2GK6YQNQCP/

lore.kernel.org/git/[email protected]/T/

public-inbox.org/git/[email protected]/

security.gentoo.org/glsa/202003-30

security.gentoo.org/glsa/202003-42