Lucene search
PRIOn knowledge basePRION:CVE-2017-12976HistoryAug 20, 2017 - 8:29 p.m.
Sql injection
2017-08-2020:29:00
PRIOn knowledge base
www.prio-n.com
17
git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.
| CPE | Name | Operator | Version |
|---|---|---|---|
| git-annex | le | 6.20170520 |
References
source.git-annex.branchable.com/?p=source.git;a=blob;f=doc/bugs/dashed_ssh_hostname_security_hole.mdwn
source.git-annex.branchable.com/?p=source.git;a=commit;h=c24d0f0e8984576654e2be149005bc884fe0403a
source.git-annex.branchable.com/?p=source.git;a=commit;h=df11e54788b254efebb4898b474de11ae8d3b471
www.debian.org/security/2017/dsa-4010
lists.debian.org/debian-lts-announce/2018/09/msg00004.html
Related
nessus
nessus
Debian DLA-1144-1 : git-annex security update
2017-10-30 00:00:00
Debian DLA-1495-1 : git-annex security update
2018-09-06 00:00:00
EulerOS 2.0 SP3 : bzr (EulerOS-SA-2021-1060)
2021-01-20 00:00:00
ubuntucve
ubuntucve
debiancve
debiancve
nvd
nvd
openvas
openvas
Debian: Security Advisory (DLA-1144-1)
2018-02-06 00:00:00
Huawei EulerOS: Security Advisory for bzr (EulerOS-SA-2021-1060)
2021-01-19 00:00:00
Debian: Security Advisory (DLA-1495-1)
2018-09-05 00:00:00
osv
osv
git-annex command injection via malicious SSH hostname
2023-07-25 13:25:42
PYSEC-2017-12
2017-10-29 20:29:00
Dulwich RCE Vulnerability
2022-05-13 01:44:04
debian
debian
[SECURITY] [DLA 1144-1] git-annex security update
2017-10-27 15:29:08
[SECURITY] [DLA 1495-1] git-annex security update
2018-09-05 19:28:50
[SECURITY] [DLA 1072-1] mercurial security update
2017-08-31 11:57:25
cve
cve
cvelist
cvelist
redhatcve
redhatcve
prion
prion
Design/Logic Flaw
2017-10-29 20:29:00
Design/Logic Flaw
2017-11-27 10:29:00
Design/Logic Flaw
2017-12-07 18:29:00
github
github
Dulwich RCE Vulnerability
2022-05-13 01:44:04
Mercurial is vulnerable to shell injection attack
2022-05-13 01:40:56
veracode
veracode
Arbitrary Command Execution
2017-10-30 00:47:04
Arbitrary Code Execution
2020-08-06 21:38:56
Remote Code Execution (RCE)
2019-01-15 09:18:24
hackerone
hackerone
Internet Bug Bounty: RCE via ssh:// URIs in multiple VCS
2017-08-14 20:53:18
freebsd
freebsd
Mercurial -- multiple vulnerabilities
2017-08-10 00:00:00
cvs -- Remote code execution via ssh command injection
2017-08-10 00:00:00
archlinux
archlinux
[ASA-201708-7] mercurial: multiple issues
2017-08-12 00:00:00
[ASA-201708-6] git: arbitrary command execution
2017-08-12 00:00:00
myhack58
myhack58
fedora
fedora
[SECURITY] Fedora 25 Update: cvs-1.11.23-41.fc25
2017-08-29 20:25:52
[SECURITY] Fedora 26 Update: cvs-1.11.23-42.fc26
2017-08-29 15:20:16
[SECURITY] Fedora 25 Update: git-2.9.5-1.fc25
2017-08-14 00:56:27
suse
suse
Security update for git (important)
2017-08-17 00:08:53
Security update for git (important)
2017-08-21 18:07:57
Security update for git (important)
2017-09-02 18:07:39
ubuntu
ubuntu
Git vulnerability
2017-08-11 00:00:00
cvs vulnerability
2017-08-21 00:00:00
centos
centos
emacs, git, gitk, gitweb, perl security update
2017-08-17 10:26:34
emacs, git, gitk, gitweb, perl security update
2017-08-24 09:43:50
alpinelinux
alpinelinux
CVE-2017-1000117
2017-10-05 01:29:04
CVE-2017-12836
2017-08-24 14:29:00
CVE-2017-1000116
2017-10-05 01:29:04
redhat
redhat
(RHSA-2017:2485) Important: git security update
2017-08-16 21:46:48
(RHSA-2017:2484) Important: git security update
2017-08-16 21:46:19
gentoo
gentoo
CVS: Command injection
2017-09-24 00:00:00
Git: Command injection
2017-09-17 00:00:00
Subversion: Arbitrary code execution
2017-09-17 00:00:00
mageia
mageia
Updated cvs package fixes security vulnerability
2017-08-19 13:16:28
Updated git packages fix security vulnerability
2017-08-14 01:19:29
cloudfoundry
cloudfoundry
USN-3387-1: Git vulnerability | Cloud Foundry
2017-08-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Git ssh URL Processing Command Execution (CVE-2017-1000117)
2018-05-02 00:00:00
slackware
slackware
[slackware-security] git
2017-08-11 23:10:53
oraclelinux
oraclelinux
git security update
2017-08-16 00:00:00
git security update
2017-08-17 00:00:00
metasploit
metasploit
Malicious Git HTTP Server For CVE-2017-1000117
2017-08-13 03:47:44
packetstorm
packetstorm
Malicious GIT HTTP Server
2017-08-30 00:00:00
amazon
amazon
Important: git
2017-08-31 16:00:00