Mercurial arbitrary code execution via a crafted git ext:: URL

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2016-3068 · ADVISORY
• pypa/advisory-database · WEB
• security.gentoo.org/glsa/201612-19 · WEB
• selenic.com/repo/hg-stable/rev/34d43cb85de8 · WEB
• web.archive.org/web/20200228003737/http://www.securityfocus.com/bid/85733 · WEB
• mercurial-scm.org/wiki/WhatsNew · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-April/181505.html · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-April/181542.html · WEB
• lists.opensuse.org/opensuse-security-announce/2016-04/msg00016.html · WEB
• lists.opensuse.org/opensuse-security-announce/2016-04/msg00017.html · WEB

Lỗ hổng khác của mercurial

• CVE-2014-9390NGHIÊM TRỌNG 9.8Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before…
• CVE-2010-4237TRUNG BÌNH 5.9Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate sig…
• CVE-2019-3902TRUNG BÌNH 5.9A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and …
• CVE-2018-17983NGHIÊM TRỌNG 9.1cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.
• CVE-2018-13348CAO 7.5The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remai…