Mercurial mishandles integer addition and subtraction

CRÍTICO 9.8CVE-2018-13347 · GHSA-3mjj-mr4f-qxmx · PYSEC-2018-89 · Published 06/07/2018 · updated 17/06/2026

En resumen

CVE-2018-13347 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a mercurial, mercurial (mercurial).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.7%, mayor que el 85.7% de las vulnerabilidades.
Solución: actualizar a 4.6.1 o posterior.

Package	Affected versions	Patched versions
mercurial PyPI	`< 4.6.1`	`4.6.1`
mercurial mercurial	`< 4.6.1`	`4.6.1`

mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.

NVD description

mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 4.6.1

4.6.1

< 4.6.1

4.6.1

Más vulnerabilidades de mercurial

Ver todo →