VDB

GCVE-110-MAGEIA-2017-282

GCVE-110-MAGEIA-2017-282
Advisory Published
Vulnetix · Advisory published August 19, 2017
Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks by specifying a hostname starting with -oProxyCommand.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiamercurial4.1.3-1.1.mga6 (unaffected), 0 (affected)—

References

Updated mercurial packages fix security vulnerabilities
advisory
Updated mercurial packages fix security vulnerabilities
issue
Updated mercurial packages fix security vulnerabilities
issue

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›