CVE-2018-19486: Critical severity git-scm Git vulnerability
Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the runcommand() API and run-command.c, because there was a dangerous change from execvp to execv during 2017.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this Git vulnerability?
The vulnerability ID for this Git vulnerability is CVE-2018-19486.
What is the severity of CVE-2018-19486?
The severity of CVE-2018-19486 is critical with a CVSS score of 9.8.
Which operating systems are affected by CVE-2018-19486?
CVE-2018-19486 affects Linux and UNIX operating systems.
What is the recommended version to fix CVE-2018-19486?
The recommended version to fix CVE-2018-19486 is Git 2.19.2.
Where can I find more information about CVE-2018-19486?
You can find more information about CVE-2018-19486 on the following websites: [Security Focus](http://www.securityfocus.com/bid/106020), [Security Tracker](http://www.securitytracker.com/id/1042166), [Red Hat Security Advisory](https://access.redhat.com/errata/RHSA-2018:3800).