Lucene search

K
ubuntuUbuntuUSN-4086-1
HistoryAug 06, 2019 - 12:00 a.m.

Mercurial vulnerability

2019-08-0600:00:00
ubuntu.com
69

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

6.2 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

60.6%

Releases

  • Ubuntu 19.04

Packages

  • mercurial - easy-to-use, scalable distributed version control system

Details

It was discovered that Mercurial mishandled symlinks in subrepositories. An
attacker could use this vulnerability to write arbitrary files to the
target’s filesystem.

OSVersionArchitecturePackageVersionFilename
Ubuntu19.04noarchmercurial< 4.8.2-1ubuntu3.19.04.1UNKNOWN
Ubuntu19.04noarchmercurial-common< 4.8.2-1ubuntu3.19.04.1UNKNOWN
Ubuntu19.04noarchmercurial-dbgsym< 4.8.2-1ubuntu3.19.04.1UNKNOWN

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

6.2 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

60.6%