Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-12976

Опубликовано: 20 авг. 2017
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:git-annex_project:git-annex:*:*:*:*:*:*:*:*
Версия до 6.20170520 (включая)

EPSS

Процентиль: 85%
0.02692
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 9 лет назад

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.

CVSS3: 8.8
debian
около 9 лет назад

git-annex before 6.20170818 allows remote attackers to execute arbitra ...

suse-cvrf
около 9 лет назад

Security update for git-annex

CVSS3: 8.8
github
больше 4 лет назад

git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.

EPSS

Процентиль: 85%
0.02692
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20