Lucene search
K

16 matches found

OSV
OSV
added 2022/05/13 1:24 a.m.5 views

GHSA-3V62-WW8W-758M Mercurial Improper Input Validation vulnerability

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

8.7CVSS8.4AI score0.00662EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/13 1:24 a.m.18 views

Mercurial Improper Input Validation vulnerability

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS7.1AI score0.00662EPSS
Exploits0References6Affected Software1
OpenVAS
OpenVAS
added 2018/10/26 12:0 a.m.31 views

openSUSE: Security Advisory for mercurial (openSUSE-SU-2018:2132-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.9AI score0.0125EPSS
Exploits0References2
OSV
OSV
added 2018/08/31 9:11 p.m.6 views

MGASA-2018-0355 Updated mercurial packages fix security vulnerabilities

This update provides mercurial version 4.6.2 and fixes the following security issues: Fix the mpatchapply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data CVE-2018-13346. Fix mpatch.c that mishandles integer addition and...

9.8CVSS8.4AI score0.0125EPSS
Exploits0References4
Mageia
Mageia
added 2018/08/31 9:11 p.m.42 views

Updated mercurial packages fix security vulnerabilities

This update provides mercurial version 4.6.2 and fixes the following security issues: Fix the mpatchapply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data CVE-2018-13346. Fix mpatch.c that mishandles integer addition and...

9.8CVSS2.1AI score0.0125EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2018/07/28 4:4 p.m.32 views

Security update for mercurial (moderate)

This update for mercurial fixes the following issues: Security issues fixed: - CVE-2018-13346: Fix mpatchapply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data bsc1100354. - CVE-2018-13347: Fix mpatch.c that mishandles integer...

1.3AI score0.0125EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2018/07/20 3:15 a.m.73 views

Security update for mercurial (moderate)

This update for mercurial fixes the following issues: Security issues fixed: - CVE-2018-13348: Fix the mpatchdecode function in mpatch.c that mishandles certain situations where there should be at least 12 bytes remaining after thecurrent position in the patch data boo1100353. - CVE-2018-13347: F...

2AI score0.0125EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2018/07/09 4:48 a.m.28 views

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS2.4AI score0.00662EPSS
Exploits0References2
OSV
OSV
added 2018/07/06 12:29 a.m.0 views

UBUNTU-CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS7.2AI score0.00662EPSS
Exploits0References4
OSV
OSV
added 2018/07/06 12:29 a.m.22 views

PYSEC-2018-90

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS2.4AI score0.00662EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2018/07/06 12:29 a.m.31 views

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS6.8AI score0.00662EPSS
Exploits0References3
Prion
Prion
added 2018/07/06 12:29 a.m.18 views

Code injection

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

5CVSS8.4AI score0.00662EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/07/06 12:29 a.m.1 views

DEBIAN-CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS8.8AI score0.00662EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/07/06 12:0 a.m.24 views

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

8.4AI score0.00662EPSS
Exploits0References3
CVE
CVE
added 2018/07/06 12:0 a.m.80 views

CVE-2018-13348

CVE-2018-13348 : In Mercurial, the mpatch_decode function in mpatch.c (pre-4.6.1) mishandles cases where there should be at least 12 bytes remaining in patch data but aren’t, potentially affecting patch processing with integrity impact. Affected: Mercurial versions before 4.6.1. Remediation: upgr...

7.5CVSS8.3AI score0.00662EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2018/07/06 12:0 a.m.24 views

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS8.6AI score0.00662EPSS
Exploits0
Rows per page
Query Builder