CVE-2017-12836

Related Files

Gentoo Linux Security Advisory 201709-17

Posted Sep 25, 2017

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201709-17 - A command injection vulnerability in CVS may allow remote attackers to execute arbitrary code. Versions less than 1.12.12-r12 are affected.

tags | advisory, remote, arbitrary

systems | linux, gentoo

advisories | CVE-2017-12836

SHA-256 | 78f216f749a83a59358d93b2407ec3478ef2da3649ff8b7511fbd25def623d28

Download | Favorite | View

Ubuntu Security Notice USN-3399-1

Posted Aug 22, 2017

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3399-1 - Hank Leininger discovered that cvs did not properly handle SSH for remote repositories. A remote attacker could use this to construct a cvs repository that when accessed could run arbitrary code with the privileges of the user.

tags | advisory, remote, arbitrary

systems | linux, ubuntu

advisories | CVE-2017-12836

SHA-256 | e23e4f58ae7a4fb2abde5c65507b1ea997de4d014bc53813f98e38b53a87c713

Download | Favorite | View