GCVE-VVD-MAGEIA-2017-282

Advisory Published

Vulnetix · Advisory published August 19, 2017

Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks by specifying a hostname starting with -oProxyCommand.

Affected Products

Vendor	Product	Versions	Platforms
Mageia	mercurial	0 (affected), 4.1.3-1.1.mga6 (unaffected)	—

advisory

issue

issue

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Investigate this vulnerability in the interactive console or download the raw GCVE record.