Lucene search
K

17 matches found

OSV
OSV
added 2022/05/13 1:24 a.m.5 views

GHSA-3V62-WW8W-758M Mercurial Improper Input Validation vulnerability

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

8.7CVSS8.4AI score0.02087EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/05/13 1:24 a.m.20 views

Mercurial Improper Input Validation vulnerability

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS7.1AI score0.02087EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.4 views

The vulnerability of the mpatch_decode function in the Mercuria version control software allows a hacker to compromise data integrity.

The vulnerability of the mpatchdecode function in the Mercuria version control software is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker who operates remotely to compromise the integrity of data...

7.5CVSS6.8AI score0.02087EPSS
Exploits0References6Affected Software3
OpenVAS
OpenVAS
added 2018/10/26 12:0 a.m.33 views

openSUSE: Security Advisory for mercurial (openSUSE-SU-2018:2132-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.9AI score0.02643EPSS
Exploits0References2
OSV
OSV
added 2018/08/31 9:11 p.m.7 views

MGASA-2018-0355 Updated mercurial packages fix security vulnerabilities

This update provides mercurial version 4.6.2 and fixes the following security issues: Fix the mpatchapply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data CVE-2018-13346. Fix mpatch.c that mishandles integer addition and...

9.8CVSS8.4AI score0.02687EPSS
Exploits0References4
Mageia
Mageia
added 2018/08/31 9:11 p.m.46 views

Updated mercurial packages fix security vulnerabilities

This update provides mercurial version 4.6.2 and fixes the following security issues: Fix the mpatchapply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data CVE-2018-13346. Fix mpatch.c that mishandles integer addition and...

9.8CVSS2.1AI score0.02687EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2018/07/28 4:4 p.m.32 views

Security update for mercurial (moderate)

This update for mercurial fixes the following issues: Security issues fixed: - CVE-2018-13346: Fix mpatchapply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data bsc1100354. - CVE-2018-13347: Fix mpatch.c that mishandles integer...

1.3AI score0.02643EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2018/07/20 3:15 a.m.73 views

Security update for mercurial (moderate)

This update for mercurial fixes the following issues: Security issues fixed: - CVE-2018-13348: Fix the mpatchdecode function in mpatch.c that mishandles certain situations where there should be at least 12 bytes remaining after thecurrent position in the patch data boo1100353. - CVE-2018-13347: F...

2AI score0.02643EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2018/07/09 4:48 a.m.29 views

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS2.4AI score0.02087EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2018/07/06 12:29 a.m.32 views

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS6.8AI score0.02087EPSS
Exploits0References3
Prion
Prion
added 2018/07/06 12:29 a.m.19 views

Code injection

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

5CVSS8.4AI score0.02087EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/07/06 12:29 a.m.1 views

DEBIAN-CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS8.8AI score0.02087EPSS
Exploits0References1
OSV
OSV
added 2018/07/06 12:29 a.m.23 views

PYSEC-2018-90

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS2.4AI score0.02087EPSS
Exploits0References4
OSV
OSV
added 2018/07/06 12:29 a.m.1 views

UBUNTU-CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS7.2AI score0.02087EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2018/07/06 12:0 a.m.25 views

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

7.5CVSS8.6AI score0.02087EPSS
Exploits0
Cvelist
Cvelist
added 2018/07/06 12:0 a.m.35 views

CVE-2018-13348

The mpatchdecode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001...

8.4AI score0.02087EPSS
Exploits0References3
CVE
CVE
added 2018/07/06 12:0 a.m.86 views

CVE-2018-13348

CVE-2018-13348 : In Mercurial, the mpatch_decode function in mpatch.c (pre-4.6.1) mishandles cases where there should be at least 12 bytes remaining in patch data but aren’t, potentially affecting patch processing with integrity impact. Affected: Mercurial versions before 4.6.1. Remediation: upgr...

7.5CVSS8.3AI score0.02087EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder