Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-12976

Опубликовано: 20 авг. 2017
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:git-annex_project:git-annex:*:*:*:*:*:*:*:*
Версия до 6.20170520 (включая)

EPSS

Процентиль: 55%
0.00329
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 8 лет назад

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.

CVSS3: 8.8
debian
больше 8 лет назад

git-annex before 6.20170818 allows remote attackers to execute arbitra ...

suse-cvrf
больше 8 лет назад

Security update for git-annex

CVSS3: 8.8
github
больше 3 лет назад

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.

EPSS

Процентиль: 55%
0.00329
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20