Lucene search
GoogleOSV:DLA-237-1HistoryJun 04, 2015 - 12:00 a.m.
mercurial - security update
2015-06-0400:00:00
Google
osv.dev
13
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
- CVE-2014-9462
Jesse Hertz of Matasano Security discovered that Mercurial, a
distributed version control system, is prone to a command injection
vulnerability via a crafted repository name in a clone command. - CVE-2014-9390
There is a security vulnerability that affects mercurial repositories in a
case-insensitive filesystem (eg. VFAT or HFS+). It allows for remote
code execution of a specially crafted repository. This is less
severe for the average Debian installation as they are usually set
up with case-sensitive filesystems.
References
Related
securityvulns
securityvulns
[SECURITY] [DSA 3257-1] mercurial security update
2015-05-12 00:00:00
mercurial code execution
2015-05-12 00:00:00
Apple Xcode git client unauthorized files access
2014-12-22 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-237-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3257-1 (mercurial - security update)
2015-05-11 00:00:00
Debian: Security Advisory (DSA-3257-1)
2015-05-10 00:00:00
nessus
nessus
Debian DLA-237-1 : mercurial security update
2015-06-05 00:00:00
Debian DSA-3257-1 : mercurial - security update
2015-05-12 00:00:00
openSUSE Security Update : mercurial (openSUSE-2015-268)
2015-03-30 00:00:00
debian
debian
[SECURITY] [DLA 237-1] mercurial security update
2015-06-04 07:25:25
[SECURITY] [DSA 3257-1] mercurial security update
2015-05-11 20:05:43
[SECURITY] [DSA 3257-1] mercurial security update
2015-05-11 20:05:25
cve
cve
CVE-2014-9462
2015-03-31 14:59:00
CVE-2014-9390
2020-02-12 02:15:00
osv
osv
mercurial - security update
2015-05-11 00:00:00
JGit Improper Input Validation vulnerability
2022-05-17 19:57:29
PYSEC-2020-217
2020-02-12 02:15:00
metasploit
metasploit
Malicious Git and Mercurial HTTP Server For CVE-2014-9390
2015-01-01 19:03:17
ubuntu
ubuntu
Git vulnerability
2015-01-14 00:00:00
mageia
mageia
Updated cgit package fixes security vulnerability
2015-08-26 23:36:28
Updated git packages fix security vulnerability
2014-12-23 23:35:35
Updated mercurial packages fix CVE-2014-9462
2015-04-03 16:11:23
github
github
JGit Improper Input Validation vulnerability
2022-05-17 19:57:29
ubuntucve
ubuntucve
CVE-2014-9390
2014-12-19 00:00:00
CVE-2014-9462
2015-03-31 00:00:00
debiancve
debiancve
CVE-2014-9390
2020-02-12 02:15:00
CVE-2014-9462
2015-03-31 14:59:00
checkpoint_advisories
checkpoint_advisories
Git Client Path Validation Command Execution (CVE-2014-9390)
2015-01-19 00:00:00
prion
prion
Command injection
2020-02-12 02:15:00
Command injection
2015-03-31 14:59:00
packetstorm
packetstorm
Malicious Git And Mercurial HTTP Server For CVE-2014-9390
2015-01-02 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: eclipse-egit-3.5.3-1.fc21
2014-12-29 10:06:12
[SECURITY] Fedora 21 Update: eclipse-jgit-3.5.3-1.fc21
2014-12-29 10:06:12
veracode
veracode
Arbitrary Code Execution
2020-09-21 06:21:42
freebsd
freebsd
git -- Arbitrary command execution on case-insensitive filesystems
2014-12-19 00:00:00
seebug
seebug
Git ηζ¬<=2.7.1 θΏη¨δ»£η ζ§θ‘ζΌζ΄
2016-03-16 00:00:00
gentoo
gentoo
Git: Arbitrary command execution
2015-09-24 00:00:00
Mercurial: Multiple vulnerabilities
2016-12-07 00:00:00
ibm
ibm
oraclelinux
oraclelinux
git19-git security update
2016-02-04 00:00:00
exploitdb
exploitdb
rosalinux
rosalinux
Advisory ROSA-SA-2021-1918
2021-07-02 17:29:24
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for OSV:DLA-237-1