CVEvulnerability

CVE-2019-1353

9.8 CRITICAL Published 2020-01-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-01-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux (also known as "WSL") while accessing a working directory on a regular Windows drive, none of the NTFS protections were active.

Affected configurations

• git-scm git (>= 2.14.0 < 2.14.6) • git-scm git (>= 2.15.0 < 2.15.4) • git-scm git (>= 2.16.0 < 2.16.6) • git-scm git (>= 2.17.0 < 2.17.3) • git-scm git (>= 2.18.0 < 2.18.2) • git-scm git (>= 2.19.0 < 2.19.3) • git-scm git (>= 2.20.0 < 2.20.2) • git-scm git (>= 2.21.0 < 2.21.1) • git-scm git (>= 2.22.0 < 2.22.2) • git-scm git (>= 2.23.0 < 2.23.1) • git-scm git (>= 2.24.0 < 2.24.1) • opensuse leap 15.1

References