PT-2017-19442 · Canonical · Bazaar

Publicado 2017-09-10 · Atualizado 2017-09-10

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Bazaar (affected versions not specified)

Description The issue arises from Bazaar's improper handling of host names in 'bzr+ssh://' URLs. A remote attacker could exploit this to construct a Bazaar repository URL. When accessed, this URL could run arbitrary code with the privileges of the user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2017-0336

Produtos afetados

Bazaar

Referências · 4

• https://usn.ubuntu.com/usn/usn-3411-1 · Nota
• https://osv.dev/vulnerability/MGASA-2017-0336 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=21681 · Nota
• https://advisories.mageia.org/MGASA-2017-0336.html · Nota de Segurança