Lucene search

CVE-2019-1349

🗓️ 24 Jan 2020 21:12:15Reported by microsoftType

Remote code execution vulnerability in Git for Visual Studi

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 199
Cvelist	CVE-2019-1352	24 Jan 202020:50	–	cvelist
Cvelist	CVE-2019-1354	24 Jan 202020:50	–	cvelist
Cvelist	CVE-2019-1350	24 Jan 202020:50	–	cvelist
Cvelist	CVE-2019-1349	24 Jan 202020:50	–	cvelist
Cvelist	CVE-2019-1387	18 Dec 201920:11	–	cvelist
Cvelist	CVE-2021-29468 Arbitrary code execution when checking out an attacker-controlled Git branch	29 Apr 202120:35	–	cvelist
Cvelist	CVE-2020-12278	27 Apr 202000:00	–	cvelist
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2019-1349	4 Mar 202500:00	–	nessus
Tenable Nessus	Security Updates for Microsoft Visual Studio Products (December 2019)	10 Dec 201900:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : libgit2 (SUSE-SU-2022:3495-1)	5 Oct 202200:00	–	nessus

Nvd

Vulners

Node

microsoft visual_studio_2017Range15.0–15.9.18

microsoft visual_studio_2019Range16.0–16.4.1

[
  {
    "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Visual Studio 2017",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "15.0"
      }
    ]
  },
  {
    "product": "Microsoft Visual Studio 2019",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "16.0"
      }
    ]
  },
  {
    "product": "Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1349
lists	www.lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html
public-inbox	www.public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/
access	www.access.redhat.com/errata/RHSA-2020:0228
security	www.security.gentoo.org/glsa/202003-30
lists	www.lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Jan 2020 21:15Current

9.2High risk

Vulners AI Score9.2

CVSS29.3

CVSS38.8

EPSS0.24202

CWE-20