9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
8.4 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.002 Low
EPSS
Percentile
64.6%
USN-5102-1 fixed vulnerabilities in Mercurial. This update provides the
corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that Mercurial mishandled symlinks in subrepositories. An
attacker could use this issue to write arbitrary files to the
targetβs filesystem. (CVE-2019-3902)
It was discovered that Mercurial incorrectly handled certain manifest files.
An attacker could use this issue to cause a denial of service and possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 ESM. (CVE-2018-17983)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 16.04 | noarch | mercurial | <Β 3.7.3-1ubuntu1.2+esm2 | UNKNOWN |
Ubuntu | 16.04 | noarch | mercurial | <Β 3.7.3-1ubuntu1.2 | UNKNOWN |
Ubuntu | 16.04 | noarch | mercurial-common | <Β 3.7.3-1ubuntu1.2 | UNKNOWN |
Ubuntu | 16.04 | noarch | mercurial-dbgsym | <Β 3.7.3-1ubuntu1.2 | UNKNOWN |
Ubuntu | 16.04 | noarch | mercurial-common | <Β 3.7.3-1ubuntu1.2+esm2 | UNKNOWN |
Ubuntu | 14.04 | noarch | mercurial | <Β 2.8.2-1ubuntu1.4+esm1 | UNKNOWN |
Ubuntu | 14.04 | noarch | mercurial | <Β 2.8.2-1ubuntu1.4 | UNKNOWN |
Ubuntu | 14.04 | noarch | mercurial-dbgsym | <Β 2.8.2-1ubuntu1.4 | UNKNOWN |
Ubuntu | 14.04 | noarch | mercurial-common | <Β 2.8.2-1ubuntu1.4+esm1 | UNKNOWN |
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
8.4 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
0.002 Low
EPSS
Percentile
64.6%