CVE-2019-1352

Опубликовано: 10 дек. 2019

Источник: redhat

CVSS3: 7.5

Описание

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.

Отчет

Even if the code in the versions of git as shipped with Red Hat Enterprise Linux 8 and Red Hat Software Collections 3 is affected by this flaw, Red Hat does not support the NTFS filesystem. For this reason, the flaw has a Low Impact.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	git	Not affected
Red Hat Enterprise Linux 7	git	Not affected
Red Hat Enterprise Linux 8	git	Fixed	RHSA-2019:4356	19.12.2019
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions	git	Fixed	RHSA-2020:0228	27.01.2020
Red Hat Software Collections for Red Hat Enterprise Linux 7	rh-git218-git	Fixed	RHSA-2020:0002	02.01.2020
Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS	rh-git218-git	Fixed	RHSA-2020:0002	02.01.2020
Red Hat Software Collections for Red Hat Enterprise Linux 7.6 EUS	rh-git218-git	Fixed	RHSA-2020:0002	02.01.2020
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS	rh-git218-git	Fixed	RHSA-2020:0002	02.01.2020

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-73

https://bugzilla.redhat.com/show_bug.cgi?id=1781963git: Files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams

7.5 High

CVSS3