https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:51:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2017-02070 bdu:2017-02070 https://cve.radiocsirt.org/vuln/bdu:2017-02070 https://cve.radiocsirt.org/vuln/bell-cve-2017-9800 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-9800 https://cve.radiocsirt.org/vuln/certfr-2017-avi-308 certfr-2017-avi-308 https://cve.radiocsirt.org/vuln/certfr-2017-avi-308 https://cve.radiocsirt.org/vuln/cnvd-2017-28444 cnvd-2017-28444 https://cve.radiocsirt.org/vuln/cnvd-2017-28444 https://cve.radiocsirt.org/vuln/euvd-2026-176443 EUVD-2026-176443 https://cve.radiocsirt.org/vuln/euvd-2026-176443 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9800 <p>A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server&#39;s repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.</p> <p>A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server&#39;s repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9800 https://cve.radiocsirt.org/vuln/ghsa-34wf-vr8w-7xh4 <p>A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server&#39;s repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.</p> <p>A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server&#39;s repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.</p> https://cve.radiocsirt.org/vuln/ghsa-34wf-vr8w-7xh4 https://cve.radiocsirt.org/vuln/gsd-2017-9800 gsd-2017-9800 https://cve.radiocsirt.org/vuln/gsd-2017-9800 https://cve.radiocsirt.org/vuln/hsec-2023-0009 <p><strong>Affected:</strong> Hackage: git-annex</p> <p># *git-annex* command injection via malicious SSH hostname</p> <p>*git-annex* was vulnerable to the same class of security hole as git&#39;s **CVE-2017-1000117**. In several cases, `git-annex` parses a repository URL, and uses it to generate a `ssh` command, with the hostname to ssh to coming from the URL. If the hostname it parses is something like `-eProxyCommand=evil`, this could result in arbitrary local code execution.</p> <p>Some details of URL parsing may prevent the exploit working in some cases.</p> <p>Exploiting this would involve the attacker tricking the victim into adding a remote something like `ssh://-eProxyCommand=evil/blah`.</p> <p>One possible avenue for an attacker that avoids exposing the URL to the user is to use `initremote` with an SSH remote, so embedding the URL in the *git-annex* branch. Then the victim would enable it with `enableremote`.</p> <p>This was fixed in version **6.20170818**. Now there&#39;s a `SshHost` type that is not allowed to start with a dash, and every invocation of `git-annex` uses a function that takes a `SshHost`.</p> <p><strong>Affected:</strong> Hackage: git-annex</p> <p># *git-annex* command injection via malicious SSH hostname</p> <p>*git-annex* was vulnerable to the same class of security hole as git&#39;s **CVE-2017-1000117**. In several cases, `git-annex` parses a repository URL, and uses it to generate a `ssh` command, with the hostname to ssh to coming from the URL. If the hostname it parses is something like `-eProxyCommand=evil`, this could result in arbitrary local code execution.</p> <p>Some details of URL parsing may prevent the exploit working in some cases.</p> <p>Exploiting this would involve the attacker tricking the victim into adding a remote something like `ssh://-eProxyCommand=evil/blah`.</p> <p>One possible avenue for an attacker that avoids exposing the URL to the user is to use `initremote` with an SSH remote, so embedding the URL in the *git-annex* branch. Then the victim would enable it with `enableremote`.</p> <p>This was fixed in version **6.20170818**. Now there&#39;s a `SshHost` type that is not allowed to start with a dash, and every invocation of `git-annex` uses a function that takes a `SshHost`.</p> https://cve.radiocsirt.org/vuln/hsec-2023-0009 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11412-1 <p>libsvn_auth_gnome_keyring-1-0-1.14.1-1.11 on GA media</p> <p>libsvn_auth_gnome_keyring-1-0-1.14.1-1.11 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11412-1 https://cve.radiocsirt.org/vuln/suse-su-2017:2163-1 <p>Security update for subversion</p> <p>Security update for subversion</p> https://cve.radiocsirt.org/vuln/suse-su-2017:2163-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9800 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: subversion, Ubuntu:16.04:LTS: subversion</p> <p>A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server&#39;s repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: subversion, Ubuntu:16.04:LTS: subversion</p> <p>A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha3 to run an arbitrary shell command. Such a URL could be generated by a malicious server, by a malicious user committing to a honest server (to attack another user of that server&#39;s repositories), or by a proxy server. The vulnerability affects all clients, including those that use file://, http://, and plain (untunneled) svn://.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9800