CVE-2017-14176 Bazaar allows remote attackers to execute arbitrary commands via a bzr+ssh URL with initial dash character in hostname
HighCVSS 8.8
EPSS 6.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi bzr(PyPI) | <= 2.7.0 | No fix listed |
| pypi bzr(PyPI) | = 2.6.0 | No fix listed |
| pypi bzr(PyPI) | = 2.7.0 | No fix listed |
| pypi bzr(PyPI) | All versions | No fix listed |
| debian/breezy(Debian:12) | < 3.0.0~bzr6772-1 | 3.0.0~bzr6772-1 |
| debian/breezy(Debian:13) | < 3.0.0~bzr6772-1 | 3.0.0~bzr6772-1 |
| debian/breezy(Debian:14) | < 3.0.0~bzr6772-1 | 3.0.0~bzr6772-1 |
| debian/bzr(Debian:12) | < 2.7.0+bzr6622-7 | 2.7.0+bzr6622-7 |
| debian/bzr(Debian:13) | < 2.7.0+bzr6622-7 | 2.7.0+bzr6622-7 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.04 | No fix listed |
| Canonical bazaar | <= 2.7.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking third-party-advisory
- bugs.launchpad.net issue-tracking third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- bugzilla.suse.com issue-tracking third-party-advisory
- github.com
- DSA-4052 issue-tracking third-party-advisory vendor-advisory
- people.canonical.com issue-tracking vendor-advisory
- www.ubuntu.com issue-tracking vendor-advisory
- github.com vendor-advisory
- Debian Security Tracker CVE-2017-14176 vendor-advisory