CVE-2018-19486 Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, becaus...
CriticalCVSS 9.8
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was a dangerous change from execvp to execv during 2017.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/git(Debian:12) | < 1:2.19.2-1 | 1:2.19.2-1 |
| debian/git(Debian:13) | < 1:2.19.2-1 | 1:2.19.2-1 |
| debian/git(Debian:14) | < 1:2.19.2-1 | 1:2.19.2-1 |
| git-scm git | < 2.19.2 | 2.19.2 |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.10 | No fix listed |
| alpine/git(Alpine:v3.6) | < 2.13.7-r2 | 2.13.7-r2 |
| alpine/git(Alpine:v3.8) | < 2.18.1-r1 | 2.18.1-r1 |
References
- Debian Security Tracker CVE-2018-19486 vendor-advisory
- 106020 third-party-advisory vdb-entry
- 1042166 third-party-advisory vdb-entry
- RHSA-2018:3800 third-party-advisory vendor-advisory
- git.kernel.org mailing-list patch third-party-advisory
- git.kernel.org release-notes third-party-advisory
- GLSA-201904-13 vendor-advisory
- USN-3829-1 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory