Mercurial CVE-2017-9462 Remote Code Execution Vulnerability
BID:99123
CVE-2017-9462 |Info
Mercurial CVE-2017-9462 Remote Code Execution Vulnerability
| Bugtraq ID: | 99123 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-9462 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2017 12:00AM |
| Updated: | Jul 24 2017 09:08AM |
| Credit: | Jonathan Claudius of Mozilla. |
| Vulnerable: |
SuSE Linux Enterprise Software Development Kit 11 SP4 SuSE Linux Enterprise Debuginfo 11 SP4 Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 Oracle Linux 7 Oracle Linux 6 Mercurial Mercurial 4.1.2 Mercurial Mercurial 4.1.1 Mercurial Mercurial 4.0.2 Mercurial Mercurial 4.0.1 Mercurial Mercurial 3.9.2 Mercurial Mercurial 3.9.1 Mercurial Mercurial 3.7.2 Mercurial Mercurial 3.7.1 Mercurial Mercurial 3.6.3 Mercurial Mercurial 3.6.2 Mercurial Mercurial 3.5.2 Mercurial Mercurial 3.5.1 Mercurial Mercurial 3.2.4 Mercurial Mercurial 3.2.3 Mercurial Mercurial 1.6.3 Mercurial Mercurial 1.0.2 Mercurial Mercurial 1.0.1 Mercurial Mercurial 4.1 Mercurial Mercurial 4.0 Mercurial Mercurial 3.9 Mercurial Mercurial 3.8 Mercurial Mercurial 3.7.3 Mercurial Mercurial 3.7 Mercurial Mercurial 3.6 Mercurial Mercurial 3.5 Mercurial Mercurial 1.6.4 |
| Not Vulnerable: |
Mercurial Mercurial 4.1.3 |
Discussion
Mercurial CVE-2017-9462 Remote Code Execution Vulnerability
Mercurial is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the affected system. Failed exploit attempts may result in a denial-of-service condition.
Versions prior to Mercurial 4.1.3 are vulnerable.
Mercurial is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the affected system. Failed exploit attempts may result in a denial-of-service condition.
Versions prior to Mercurial 4.1.3 are vulnerable.
Exploit / POC
Mercurial CVE-2017-9462 Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Mercurial CVE-2017-9462 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Mercurial CVE-2017-9462 Remote Code Execution Vulnerability
References:
References:
- Bug 1459482 - (CVE-2017-9462) CVE-2017-9462 mercurial: Python debugger accessibl (Red Hat Bugzilla)
- changeset 32050:77eaf9539499 (Mercurial)
- CVE-2017-9462 (Red Hat Bugzilla)
- Mercurial 4.1.3 (Mercurial)
- Mercurial Home Page (mercurial)