Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-9462HistoryMar 31, 2015 - 2:59 p.m.
CVE-2014-9462
2015-03-3114:59:03
Debian Security Bug Tracker
security-tracker.debian.org
19
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.038
Percentile
92.0%
The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | mercurial | < 3.4-1 | mercurial_3.4-1_all.deb |
| Debian | 11 | all | mercurial | < 3.4-1 | mercurial_3.4-1_all.deb |
| Debian | 999 | all | mercurial | < 3.4-1 | mercurial_3.4-1_all.deb |
| Debian | 13 | all | mercurial | < 3.4-1 | mercurial_3.4-1_all.deb |
Related
cvelist
cvelist
CVE-2014-9462
2015-03-31 14:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0129)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-237-1)
2023-03-08 00:00:00
Debian Security Advisory DSA 3257-1 (mercurial - security update)
2015-05-11 00:00:00
nvd
nvd
CVE-2014-9462
2015-03-31 14:59:03
cve
cve
CVE-2014-9462
2015-03-31 14:59:03
nessus
nessus
openSUSE Security Update : mercurial (openSUSE-2015-268)
2015-03-30 00:00:00
Debian DLA-237-1 : mercurial security update
2015-06-05 00:00:00
Debian DSA-3257-1 : mercurial - security update
2015-05-12 00:00:00
securityvulns
securityvulns
mercurial code execution
2015-05-12 00:00:00
[SECURITY] [DSA 3257-1] mercurial security update
2015-05-12 00:00:00
osv
osv
PYSEC-2015-14
2015-03-31 14:59:00
mercurial - security update
2015-06-04 00:00:00
ubuntucve
ubuntucve
CVE-2014-9462
2015-03-31 00:00:00
mageia
mageia
Updated mercurial packages fix CVE-2014-9462
2015-04-03 16:11:23
prion
prion
Command injection
2015-03-31 14:59:00
github
github
debian
debian
[SECURITY] [DLA 237-1] mercurial security update
2015-06-04 07:24:39
[SECURITY] [DSA 3257-1] mercurial security update
2015-05-11 20:05:25
[SECURITY] [DSA 3257-1] mercurial security update
2015-05-11 20:05:25
gentoo
gentoo
Mercurial: Multiple vulnerabilities
2016-12-07 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1918
2021-07-02 17:29:24
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.038
Percentile
92.0%
Related for DEBIANCVE:CVE-2014-9462