Oval Definition:
oval:com.ubuntu.artful:def:20171000116000
Revision Date
:
2017-10-04
Version
:
1
Title
:
CVE-2017-1000116 on Ubuntu 17.10 (artful) - medium.
Description
:
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2017-1000116
Platform(s)
:
Ubuntu 17.10
Product(s)
:
Definition Synopsis
Ubuntu 17.10 (artful) is installed.
AND
The 'mercurial' package in artful was vulnerable but has been fixed (note: '4.3.1-2').
BACK