GCVE-VVD-MAGEIA-2017-331

Advisory Published

Vulnetix · Advisory published September 7, 2017

Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks by specifying a hostname starting with -oProxyCommand.

Affected Products

Vendor	Product	Versions	Platforms
Mageia	mercurial	0 (affected), 3.1.1-5.5.mga5 (unaffected)	—

advisory

issue

issue

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Investigate this vulnerability in the interactive console or download the raw GCVE record.