VDB

GCVE-110-MAGEIA-2019-250

GCVE-110-MAGEIA-2019-250
Advisory Published
Vulnetix · Advisory published September 6, 2019
It was discovered that Mercurial mishandled symlinks in subrepositories. An attacker could use this vulnerability to write arbitrary files to the target’s filesystem (CVE-2019-3902).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageianvidia340340.108-1.mga7.nonfree (unaffected), 0 (affected)—
Mageiamercurial4.9.1-1.mga6 (unaffected), 0 (affected), 0 (affected), 4.9.1-1.mga6 (unaffected)—
Mageiamercurial0 (affected), 4.9.1-1.mga7 (unaffected), 0 (affected), 4.9.1-1.mga7 (unaffected)—

Aliases

CVE-2019-3902

References

Updated mercurial packages fix security vulnerability
advisory
Updated mercurial packages fix security vulnerability
issue
Updated mercurial packages fix security vulnerability
advisory
Updated nvidia340 packages adds official kernel 5.4 support
advisory
Updated nvidia340 packages adds official kernel 5.4 support
issue
Updated nvidia340 packages adds official kernel 5.4 support
issue

Browse GCVE Records

74,753 records in the GCVE database · Updated July 26, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›