CVE-2017-12976 git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a rela...
HighCVSS 8.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-1000116, and CVE-2017-1000117.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/git-annex(Debian:12) | < 6.20170818-1 | 6.20170818-1 |
| debian/git-annex(Debian:13) | < 6.20170818-1 | 6.20170818-1 |
| debian/git-annex(Debian:14) | < 6.20170818-1 | 6.20170818-1 |
| git-annex project git-annex | <= 6.20170520 | No fix listed |
References
- Debian Security Tracker CVE-2017-12976 vendor-advisory
- source.git-annex.branchable.com
- source.git-annex.branchable.com
- source.git-annex.branchable.com
- DSA-4010 vendor-advisory
- [debian-lts-announce] 20180905 [SECURITY] [DLA 1495-1] git-annex security update mailing-list
- bugs.debian.org issue-tracking