{
  "cveId": "CVE-2019-1351",
  "url": "https://patchblox.com/security/cve/CVE-2019-1351",
  "summary": "CVE-2019-1351 is fixed in 13 products on 1 platform, first by git 1:2.17.1-1ubuntu0.5, released December 10, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Git for Visual Studio Tampering Vulnerability",
  "description": "\u003Cp\u003EA tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.\u003C/p\u003E\n\u003Cp\u003ETo exploit the vulnerability, an attacker must clone a file using a specially crafted path on a vulnerable system.\u003C/p\u003E\n\u003Cp\u003EThe security update fixes the vulnerability by ensuring Git for Visual Studio properly handles folder paths.\u003C/p\u003E",
  "published": "2019-12-10T08:00:00Z",
  "severity": "Moderate",
  "epss": 0.08718,
  "epssPercentile": 0.95171,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1351",
  "fixes": [
    {
      "platform": "linux",
      "product": "git",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-all",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-all 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-all-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-cvs",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-cvs 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-cvs-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-daemon-run",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-daemon-run 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-daemon-run-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-daemon-sysvinit",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-daemon-sysvinit 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-daemon-sysvinit-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-el",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-el 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-el-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-email",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-email 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-email-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-gui",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-gui 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-gui-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-man",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-man 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-man-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-mediawiki",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-mediawiki 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-mediawiki-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "git-svn",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "git-svn 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-git-svn-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "gitk",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "gitk 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-gitk-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    },
    {
      "platform": "linux",
      "product": "gitweb",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:2.17.1-1ubuntu0.5",
      "fix": "gitweb 1:2.17.1-1ubuntu0.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-gitweb-1-2.17.1-1ubuntu0.5",
      "released": "2019-12-10T10:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}