| Package | Affected versions | Patched versions |
|---|---|---|
| git-annex | ≤ 6.20170520 |
git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free