VDB
ALPINE-CVE-2019-1353
ALPINE-CVE-2019-1353
PUBLISHED
CVSS 9.800000190734863 CRITICAL
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux (also known as "WSL") while accessing a working directory on a regular Windows drive, none of the NTFS protections were active.
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.20 | git | 1.7.4.2-r0, 1.7.0.5-r0, 1.7.0.5-r1 |
| Alpine:v3.10 | git | 2.3.6-r1, 2.3.6-r0, 2.3.5-r0 |
| Alpine:v3.22 | git | 2.13.2-r1, 1.6.1.3-r1, 0 |
| Alpine:v3.8 | git | 1.7.1-r0, 1.7.1-r1, 1.7.1-r2 |
| Alpine:v3.11 | git | 2.16.0-r0, 2.16.1-r0, 2.16.2-r0 |
| Alpine:v3.16 | git | 1.7.5.3-r0, 1.6.0.4-r1, 1.6.0.4-r2 |
| Alpine:v3.17 | git | 2.6.0-r2, 2.24.0-r0, 2.7.3-r0 |
| Alpine:v3.11 | libgit2 | 0.23.2-r0, 0.27.4-r0, 0.27.3-r0 |
| Alpine:v3.23 | git | 1.8.3-r0, 2.16.2-r0, 2.15.1-r0 |
| Alpine:v3.9 | git | 1.6.0.4-r1, 1.6.1.3-r1, 1.6.2.1-r0 |
| Alpine:v3.14 | git | 2.15.1-r0, 1.7.9.6-r0, 1.7.2.1-r0 |
| Alpine:v3.18 | git | 1.7.9.6-r0, 2.9.2-r0, 2.9.1-r0 |
| Alpine:v3.15 | git | 2.21.0-r3, 2.14.3-r0, 2.14.2-r0 |
| Alpine:v3.19 | git | 2.10.2-r0, 2.21.0-r4, 2.21.0-r3 |
| Alpine:v3.13 | git | 2.14.0, 0, 0 |
| Alpine:v3.12 | git | 1.7.4.1-r0, 1.6.0.4-r1, 1.6.1-r0 |
| Alpine:v3.24 | git | 2.14.0, 0 |
| Alpine:v3.7 | git | 1.7.4-r1, 1.6.0.4-r1, 1.6.0.4-r2 |
| Alpine:v3.21 | git | 1.7.8.4-r0, 2.14.0, 0 |
Timeline
- Jan 24, 2020 CVE Published
- Apr 30, 2026 Distribution Patch
- Jul 8, 2026 CVE Updated