IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
Ohne Score

CVE-2019-1387

Microsoft Corporation Git; git git Veröffentlicht: (vor 6 Jahren)

Beschreibung

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
git git < 2,24.1, < 2.23.1, < 2.22.2, < 2.21.1, < 2.20.2, < 2.19.3, < 2.18.2, < 2.17.3, < 2.16.6, < 2.15.4, < 2.14.6
Microsoft Corporation Git Before v2.24.1, Before v2.23.1, Before v2.22.2, Before v2.21.1, Before v2.20.2, Before v2.19.3, Before v2.18.2, Before v2.17.3, Before v2.16.6, Before v2.15.4, Before v2.14.6

Referenzen und Patches

Neue CVEs im selben Produkt — Git

6.3Mittel
CVE-2025-48386

Git allows a buffer overflow in 'wincred' credential helper

git git

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as a unique key for storing and …