The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.
Find out more about CVE-2018-13346 from the MITRE-CVE dictionary and NIST NVD
Login may be required to access defects or downloads.
Product Name | Status | Defect | Fixed | Downloads |
---|---|---|---|---|
Linux | ||||
Wind River Linux LTS 17 | Won't Fix | -- | -- | -- |
Wind River Linux 9 | Fixed |
LIN9-7141 |
9.0.0.17 |
Wind River Linux 9.0.0.17 Wind River Linux 9.0.0.18 Wind River Linux 9.0.0.19 Wind River Linux 9.0.0.20 Wind River Linux 9.0.0.21 Wind River Linux 9.0.0.22 Wind River Linux 9.0.0.23 Wind River Linux 9.0.0.24 Wind River Linux 9.0.0.25 Wind River Linux 9.0.0.26 |
Wind River Linux 8 | Fixed |
LIN8-9443 |
8.0.0.27 |
Wind River Linux 8.0.0.27 Wind River Linux 8.0.0.28 Wind River Linux 8.0.0.29 Wind River Linux 8.0.0.30 Wind River Linux 8.0.0.31 Wind River Linux 8.0.0.32 Wind River Linux 8.0.0.33 Wind River Linux 8.0.0.34 |
Wind River Linux LTS 18 | Won't Fix | -- | -- | -- |
Wind River Linux LTS 19 | Won't Fix | -- | -- | -- |
Wind River Linux CD release | Won't Fix | -- | -- | -- |
VxWorks | ||||
VxWorks 7 | Not Vulnerable | -- | -- | -- |
VxWorks 6.9 | Not Vulnerable | -- | -- | -- |
Product Name | Status | Defect | Fixed | Downloads |
---|
mercurial