GitHub Advisoryadvisory · PyPI

GHSA-p575-cf9h-wv42 Mercurial Out-of-bounds Read vulnerability

HIGH Published 2022-05-14 Modified 2024-09-24 Official page ↗

Aliases: CVE-2018-17983
Ecosystem: PyPI
Packages: mercurial
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses: CWE-125
Reviewed: 2024-05-01

Affected packages

• PyPI mercurial: < 4.7.2 → fixed in 4.7.2

Description

`cext/manifest.c` in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry.

Related

Alias · CVE (1)

CVE-2018-17983 cext/manifest.c in Mercurial before 4.7.2 has an out-of-bounds read during parsing of a malformed manifest entry. vulnerability

Weakness · CWE (1)

CWE-125 Out-of-bounds Read weakness

References