Published: 06/06/2017 Updated: 05/02/2020

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 940

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

In Mercurial prior to 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mercurial mercurial
debian debian linux 9.0
debian debian linux 8.0
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server eus 7.4
redhat enterprise linux server eus 7.6
redhat enterprise linux server tus 7.6
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux server aus 7.3
redhat enterprise linux server aus 7.4
redhat enterprise linux server aus 7.6
redhat enterprise linux server eus 7.3
redhat enterprise linux workstation 6.0
redhat enterprise linux server 7.0
redhat enterprise linux server eus 7.5
redhat enterprise linux server tus 7.3

Synopsis Important: mercurial security update Type/Severity Security Advisory: Important Topic An update for mercurial is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabilit ...

Several issues were discovered in Mercurial, a distributed revision control system CVE-2017-9462 (fixed in stretch only) Jonathan Claudius of Mozilla discovered that repositories served over stdio could be tricked into granting authorized users access to the Python debugger CVE-2017-1000115 Mercurial's symlink auditing was incomplete, ...

Debian Bug report logs - #871709 mercurial: CVE-2017-1000115: path traversal via symlink Package: src:mercurial; Maintainer for src:mercurial is Python Applications Packaging Team <python-apps-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 10 Aug 2017 20:00:01 UTC Seve ...

Debian Bug report logs - #861243 mercurial: CVE-2017-9462: allows remote users unauthorized access to a hg serve --stdio instance Package: mercurial; Maintainer for mercurial is Python Applications Packaging Team <python-apps-team@listsaliothdebianorg>; Source for mercurial is src:mercurial (PTS, buildd, popcon) Reported ...

Debian Bug report logs - #871710 mercurial: CVE-2017-1000116: command injection on clients through malicious ssh URLs Package: src:mercurial; Maintainer for src:mercurial is Python Applications Packaging Team <python-apps-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 1 ...

Python debugger accessible to authorized users:A flaw was found in the way "hg serve --stdio" command in Mercurial handled command-line options A remote, authenticated attacker could use this flaw to execute arbitrary code on the Mercurial server by using specially crafted command-line options (CVE-2017-9462) ...

A flaw was found in the way "hg serve --stdio" command in Mercurial handled command-line options A remote, authenticated attacker could use this flaw to execute arbitrary code on the Mercurial server by using specially crafted command-line options ...

CWE-732 https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1.3_.282017-4-18.29 https://www.mercurial-scm.org/repo/hg/rev/77eaf9539499 https://bugs.debian.org/861243 http://www.securityfocus.com/bid/99123 https://security.gentoo.org/glsa/201709-18 http://www.debian.org/security/2017/dsa-3963 https://access.redhat.com/errata/RHSA-2017:1576 https://lists.debian.org/debian-lts-announce/2018/07/msg00005.html https://access.redhat.com/errata/RHSA-2017:1576 https://nvd.nist.gov https://www.debian.org/security/./dsa-3963

CVE-2017-9462

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect