CVE-2017-14176

Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in…

published November 27, 2017

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06242 · 93.5th percentile
Published
2017-11-27T10:00Z
EPSS history
Timeline
  • 27 NOV 10:00Z
    Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in…
    cvelistv5