CVE-2018-19486 Command injection in n/a
Git executes commands from the current working directory, allowing attackers to run arbitrary code via malicious files in the repository.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-19486?
CVE-2018-19486 is a critical command injection vulnerability in Canonical Ubuntu Linux, published on 23 Nov 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was a dangerous change from execvp to execv during 2017.
Weakness: CWE-426
Which versions are affected by CVE-2018-19486?
It affects 2 products.
Linux distribution packages (19)
rh-git218-git Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-all Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-core Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-core-doc Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-cvs Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-daemon Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-debuginfo Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-email Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-gui Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-instaweb Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-p4 Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-subtree Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-git-svn Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-gitk Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-gitweb Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-perl-Git Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
rh-git218-perl-Git-SVN Red Hat:rhel_software_collections:3::el7 | All versions | 0:2.18.1-3.el7 |
git SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 2.16.4-3.9.2 |
git SUSE:Linux Enterprise Module for Development Tools 15 | All versions | 2.16.4-3.9.2 |
Products include Canonical Ubuntu Linux, Git-Scm Git.
How do I fix CVE-2018-19486?
Upgrade to a fixed version.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2018-19486 being exploited?
There is no known exploitation of CVE-2018-19486 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2018-19486, DEBIAN-CVE-2018-19486, GHSA-4rxq-j825-6wv8, MGASA-2019-0199, RHSA-2018:3800, SUSE-SU-2018:4190-1 and 1 more.