The mpatch_decode function in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001
Reporter | Title | Published | Views | Family All 37 |
---|---|---|---|---|
![]() | CVE-2018-13348 | 6 Jul 201800:00 | – | cvelist |
![]() | CVE-2018-13348 | 6 Jul 201800:29 | – | cve |
![]() | PYSEC-2018-90 | 6 Jul 201800:29 | – | osv |
![]() | mercurial - security update | 27 Jul 202000:00 | – | osv |
![]() | mercurial - security update | 5 Jul 201800:00 | – | osv |
![]() | OPENSUSE-SU-2024:10586-1 mercurial-5.9.1-2.1 on GA media | 15 Jun 202400:00 | – | osv |
![]() | CVE-2018-13348 | 9 Jul 201804:48 | – | redhatcve |
![]() | Code injection | 6 Jul 201800:29 | – | prion |
![]() | CVE-2018-13348 | 6 Jul 201800:00 | – | ubuntucve |
![]() | Buffer Overflow | 6 Jul 201807:47 | – | veracode |
Source | Link |
---|---|
lists | www.lists.debian.org/debian-lts-announce/2020/07/msg00032.html |
mercurial-scm | www.mercurial-scm.org/wiki/WhatsNew |
mercurial-scm | www.mercurial-scm.org/repo/hg/rev/90a274965de7 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo