Описание
git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 6.20170818-1 |
| bionic | not-affected | 6.20170818-1 |
| cosmic | not-affected | 6.20170818-1 |
| devel | not-affected | 6.20170818-1 |
| disco | not-affected | 6.20170818-1 |
| eoan | not-affected | 6.20170818-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | 6.20170818-1 |
| esm-apps/focal | not-affected | 6.20170818-1 |
| esm-apps/jammy | not-affected | 6.20170818-1 |
Показывать по
Ссылки на источники
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.
git-annex before 6.20170818 allows remote attackers to execute arbitra ...
git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3