Detections
Analytics

RHEL 6 / 7 : mercurial (RHSA-2017:1576)

high Nessus Plugin ID 101077

Language:

Synopsis

The remote Red Hat host is missing a security update for mercurial.

Description

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:1576 advisory.

 Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects.

 Security Fix(es):

 * A flaw was found in the way hg serve --stdio command in Mercurial handled command-line options. A remote, authenticated attacker could use this flaw to execute arbitrary code on the Mercurial server by using specially crafted command-line options. (CVE-2017-9462)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the RHEL mercurial package based on the guidance in RHSA-2017:1576.

See Also

http://www.nessus.org/u?06c0dbdd

https://access.redhat.com/errata/RHSA-2017:1576

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=1459482

Plugin Details

Severity: High

ID: 101077

File Name: redhat-RHSA-2017-1576.nasl

Version: 3.15

Type: local

Agent: unix

Published: 6/28/2017

Updated: 11/4/2024

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

Vendor

Vendor Severity: Important

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2017-9462

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 8.2

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:redhat:enterprise_linux:7, cpe:/o:redhat:enterprise_linux:6, p-cpe:/a:redhat:enterprise_linux:emacs-mercurial, p-cpe:/a:redhat:enterprise_linux:emacs-mercurial-el, p-cpe:/a:redhat:enterprise_linux:mercurial-hgk, p-cpe:/a:redhat:enterprise_linux:mercurial

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/27/2017

Vulnerability Publication Date: 6/6/2017

Exploitable With

Metasploit (Mercurial Custom hg-ssh Wrapper Remote Code Exec)

Reference Information

CVE: CVE-2017-9462

CWE: 284

RHSA: 2017:1576