Lucene search
Veracode Vulnerability DatabaseVERACODE:6977HistoryJul 06, 2018 - 7:31 a.m.
Buffer Underflow
2018-07-0607:31:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.006 Low
EPSS
Percentile
77.8%
mercurial is vulnerable to buffer underflows. The application does not validate the pointer position when reading a patch fragment, allowing a malicious user to cause a buffer underflow by passing a patch file to the application, causing the application to crash or arbitrary code to be executed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mercurial | le | 4.6 | |
| mercurial:stretch | eq | 4.0-1+deb9u1 |
References
access.redhat.com/errata/RHSA-2019:2276
lists.debian.org/debian-lts-announce/2020/07/msg00032.html
www.mercurial-scm.org/repo/hg-committed/log?rev=modifies%28%22mercurial%2Fmpatch.c%22%29+and+4.5%3A%3A
www.mercurial-scm.org/repo/hg/rev/1acfc35d478c
www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29
Related
osv
osv
PYSEC-2018-89
2018-07-06 00:29:00
mercurial - security update
2020-07-27 00:00:00
mercurial - security update
2018-07-05 00:00:00
ubuntucve
ubuntucve
CVE-2018-13347
2018-07-06 00:00:00
github
github
Mercurial mishandles integer addition and subtraction
2022-05-13 01:24:55
redhatcve
redhatcve
CVE-2018-13347
2018-07-09 04:49:12
cvelist
cvelist
CVE-2018-13347
2018-07-06 00:00:00
debiancve
debiancve
CVE-2018-13347
2018-07-06 00:29:00
nvd
nvd
CVE-2018-13347
2018-07-06 00:29:00
prion
prion
Authentication flaw
2018-07-06 00:29:00
cve
cve
CVE-2018-13347
2018-07-06 00:29:00
nessus
nessus
EulerOS 2.0 SP3 : mercurial (EulerOS-SA-2019-2273)
2019-11-08 00:00:00
EulerOS 2.0 SP5 : mercurial (EulerOS-SA-2019-2214)
2019-11-08 00:00:00
EulerOS 2.0 SP2 : mercurial (EulerOS-SA-2020-1642)
2020-06-17 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2019-2273)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2019-2214)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2020-1642)
2020-06-16 00:00:00
suse
suse
Security update for mercurial (moderate)
2018-07-28 16:04:51
Security update for mercurial (moderate)
2018-07-20 03:15:02
redhat
redhat
(RHSA-2019:2276) Moderate: mercurial security update
2019-08-06 08:20:05
oraclelinux
oraclelinux
mercurial security update
2019-08-13 00:00:00
centos
centos
emacs, mercurial security update
2019-08-30 03:38:48
mageia
mageia
Updated mercurial packages fix security vulnerabilities
2018-09-01 00:11:59
debian
debian
[SECURITY] [DLA 2293-1] mercurial security update
2020-07-31 11:06:17
photon
photon