NVD

Id
19425  
Name
CVE-2016-3630  
Description
The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-10-03  
Seq
2016-3630  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107018 19425 CVE-2016-3630 FEDORA-2016-79604dde9f  View
107019 19425 CVE-2016-3630 FEDORA-2016-b7f1f8e3bf  View
107020 19425 CVE-2016-3630 SUSE-SU-2016:1010  View
107021 19425 CVE-2016-3630 SUSE-SU-2016:1011  View
107022 19425 CVE-2016-3630 openSUSE-SU-2016:1016  View
107023 19425 CVE-2016-3630 openSUSE-SU-2016:1073  View
107024 19425 CVE-2016-3630 DSA-3542  View
107025 19425 CVE-2016-3630 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
107026 19425 CVE-2016-3630 https://selenic.com/repo/hg-stable/rev/b6ed2505d6cf  View
107027 19425 CVE-2016-3630 https://selenic.com/repo/hg-stable/rev/b9714d958e89  View
107028 19425 CVE-2016-3630 https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.7.3_.282016-3-29.29  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1322 JVNDB-2016-002095 Mercurial のバイナリデルタデコーダにおける任意のコードを実行される脆弱性 Mercurial のバイナリデルタデコーダには、(a) 丸め誤差をサイジングするリストおよび (b) 短いレコードに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2016-3630 90136 CVE-2016-3630 19425 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002095.html 2016-03-29 2016-04-19 View