Wind River Support Network

HomeDefectsLIN9-7153
Fixed

LIN9-7153 : Security Advisory - mercurial - CVE-2018-13348

Created: Jul 15, 2018    Updated: Dec 3, 2018
Resolved Date: Jul 24, 2018
Found In Version: 9.0.0.16
Fix Version: 9.0.0.17
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001.

https://nvd.nist.gov/vuln/detail/CVE-2018-13348

Other Downloads


CVEs


Live chat
Online