Alta

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actua

Publicada: 06.07.2018
Actualizado: 11.10.2026 12:20

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.

Software afectado

Haz clic en una tecnología para ver todas sus vulnerabilidades.

Plataforma	Paquete	Versiones vulnerables	Corregida en
Python (PyPI)	mercurial	< 4.6.1	4.6.1

Referencias

Puntuación CVSS 7.5/10

Vector CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Debilidad (CWE): CWE-20
Plataforma: Python (PyPI)
Paquete: mercurial
Publicada: 06.07.2018
Actualizado: 11.10.2026 12:20

Fuentes y licencias

OSV / GitHub Advisory Database - GHSA-3v62-ww8w-758m - CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2018-90 - PyPA Advisory Database; CC BY 4.0

Historial de vulnerabilidades: mercurial

Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.

Todas (18) en el archivo

Entradas en total: 18
Primera → última: 03.2015 05.2022
Sin corrección: 0
Explotada en ataques: 0

Distribución por gravedad

Crítica 6
Alta 9
Media 3

Divulgaciones por año

2017: 4
2018: 5
2019: 1
2020: 1
2021: 0
2022: 2
2023: 0
2024: 0
2025: 0
2026: 0

antes: 5

12.02.2020

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; m

Crítica · 9.8 CVE-2014-9390 < 3.2.3 3.2.3
04.10.2018

cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.

Alta · 9.1 CVE-2018-17983 < 4.7.2 4.7.2
06.07.2018

mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.

Crítica · 9.8 CVE-2018-13347 < 4.6.1 4.6.1
06.07.2018

The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.

Alta · 7.5 CVE-2018-13346 < 4.6.1 4.6.1
06.07.2018

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actua esta entrada

Alta · 7.5 CVE-2018-13348 < 4.6.1 4.6.1
14.03.2018

Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via n

Crítica · 9.1 CVE-2018-1000132 < 4.5.1 4.5.1
07.12.2017

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repo

Crítica · 9.8 CVE-2017-17458 < 4.4.1 4.4.1
05.10.2017

Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.

Crítica · 9.8 CVE-2017-1000116 < 4.3 4.3
05.10.2017

Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository

Alta · 7.5 CVE-2017-1000115 < 4.3 4.3
06.06.2017

Mercurial has Incorrect Permission Assignment for Critical Resource

Alta · 8.8 CVE-2017-9462 < 4.1.3 4.1.3
09.05.2016

The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.

Alta · 8.8 CVE-2016-3105 < 3.8-rc 3.8-rc
13.04.2016

The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b)

Alta · 8.8 CVE-2016-3630 < 3.7.3 3.7.3
13.04.2016

Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.

Alta · 8.8 CVE-2016-3069 < 3.7.3 3.7.3
13.04.2016

Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.

Alta · 8.8 CVE-2016-3068 < 3.7.3 3.7.3
31.03.2015

The _validaterepo function in sshpeer in Mercurial before 3.2.4 allows remote attackers to execute arbitrary commands via a crafted repository name in a clone command.

Crítica · 9.8 CVE-2014-9462 < 3.2.4 3.2.4

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación