Vulnetix
Try Vulnetix Request Demo
CVE-2017-12976 PUBLISHED

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.

EPSS 0.17% · 38.0th percentile

Risk Scores

EPSS Score
0.17%
38.0th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSgit-annex0, 5.20150731-1build1, 5.20151208-1

Timeline

References

Open in Interactive Console →