Lucene search
+L

202 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:37 a.m.5 views

SUSE CVE-2017-16228

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

9.8CVSS8.5AI score0.03422EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/05/17 4:14 a.m.32 views

Dulwich Buffer Overflow when handling pack files

Buffer overflow in the C implementation of the applydelta function in pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file...

7.5CVSS7.4AI score0.03379EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/05/17 4:14 a.m.31 views

GHSA-VJJF-3RVG-GV3V Dulwich Buffer Overflow when handling pack files

Buffer overflow in the C implementation of the applydelta function in pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file...

9.8CVSS9.5AI score0.03379EPSS
SaveExploits0References5
OSV
OSV
added 2022/05/17 4:14 a.m.18 views

GHSA-4J5J-58J7-6C3W Dulwich Arbitrary code execution via commit with directory path starting with .git

The buildindexfromtree function in index.py in Dulwich versions 0.9.9 and below allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree...

9.8CVSS7.7AI score0.04996EPSS
SaveExploits1References11
Github Security Blog
Github Security Blog
added 2022/05/17 4:14 a.m.18 views

Dulwich Arbitrary code execution via commit with directory path starting with .git

The buildindexfromtree function in index.py in Dulwich versions 0.9.9 and below allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly handled when checking out a working tree...

7.5CVSS7.7AI score0.04996EPSS
SaveExploits1References11Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:44 a.m.33 views

Dulwich RCE Vulnerability

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

9.8CVSS7.8AI score0.03422EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2022/05/13 1:44 a.m.40 views

GHSA-CWWH-4382-6FWR Dulwich RCE Vulnerability

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117...

9.8CVSS8.6AI score0.03422EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.14 views

Mageia: Security Advisory (MGASA-2018-0445)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.03422EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.22 views

Mageia: Security Advisory (MGASA-2015-0157)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.5AI score0.04996EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2018:2047-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.03422EPSS
SaveExploits0References3
OSV
OSV
added 2018/11/11 9:39 p.m.11 views

MGASA-2018-0445 Updated python-dulwich packages fix security vulnerability

Dulwich, when an SSH subprocess is used, allowed remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname CVE-2017-16228...

9.8CVSS9.6AI score0.03422EPSS
SaveExploits0References3
Mageia
Mageia
added 2018/11/11 9:39 p.m.44 views

Updated python-dulwich packages fix security vulnerability

Dulwich, when an SSH subprocess is used, allowed remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname CVE-2017-16228...

9.8CVSS6.8AI score0.03422EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/08/07 12:00 a.m.22 views

openSUSE: Security Advisory for python-dulwich (openSUSE-SU-2018:2213-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.3AI score0.03422EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/08/07 12:00 a.m.27 views

openSUSE Security Update : python-dulwich (openSUSE-2018-801)

This update for python-dulwich to version 0.18.5 fixes this security issue : - CVE-2017-16228: Dulwich, when an SSH subprocess is used, allowed remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname bsc1066430. For detailed changes please see...

9.8CVSS7.5AI score0.03422EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2018/08/06 3:16 p.m.104 views

Security update for python-dulwich (moderate)

This update for python-dulwich to version 0.18.5 fixes this security issue: - CVE-2017-16228: Dulwich, when an SSH subprocess is used, allowed remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname bsc1066430. For detailed changes please see...

7.5CVSS3.5AI score0.03422EPSS
SaveExploits0References1
OSV
OSV
added 2018/07/24 7:20 a.m.8 views

SUSE-SU-2018:2047-1 Security update for python-dulwich

This update for python-dulwich to version 0.18.5 fixes this security issue: - CVE-2017-16228: Dulwich, when an SSH subprocess is used, allowed remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname bsc1066430. For detailed changes please see...

9.8CVSS9.8AI score0.03422EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/01/15 12:00 a.m.33 views

Fedora 27 : python-dulwich (2017-5dd9b12179)

Update to 0.18.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

9.8CVSS7AI score0.03422EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2017/12/16 12:00 a.m.18 views

Fedora Update for python-dulwich FEDORA-2017-5dd9b12179

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.03422EPSS
SaveExploits0References2
Fedora
Fedora
added 2017/12/15 10:12 a.m.31 views

[SECURITY] Fedora 27 Update: python-dulwich-0.18.6-1.fc27

Dulwich is a pure-Python implementation of the Git file formats and protocols. The project is named after the village in which Mr. and Mrs. Git live in the Monty Python sketch...

9.8CVSS2.6AI score0.03422EPSS
SaveExploits0
Veracode
Veracode
added 2017/12/04 7:47 a.m.11 views

Cross-Site Scripting (XSS)

dulwich is vulnerable to cross-site scripting XSS attacks. The vulnerability exists as the service name is not properly sanitized, allowing a malicious user to inject and execute arbitrary web script...

6AI score
SaveExploits0
Rows per page
Query Builder