The version of Atlassian SourceTree installed on the remote Windows host is a version 0.5.1.0 prior to 2.4.7.0. It is, therefore, affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for mercurial fixes the following issue :

  - CVE-2017-17458: A specially malformed repository may     have caused Git subrepositories to run arbitrary code     (bsc#1071715)

According to the version of the mercurial package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Mercurial before 4.4.1, it is possible that a     specially malformed repository can cause Git     subrepositories to run arbitrary code in the form of a     .git/hooks/post-update script checked into the     repository. Typical use of Mercurial prevents     construction of such repositories, but they can be     created programmatically.(CVE-2017-17458)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The fix for arbitrary code execution documented in CVE-2017-17458 was incomplete in the previous upload. A more exhaustive change was implemented upstream and completely disables non-Mercurial subrepositories unless users changed the subrepos.allowed setting.

For Debian 8 'Jessie', this problem has been fixed in version 3.1.2-2+deb8u6.

We recommend that you upgrade your mercurial packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities were discovered in mercurial, an easy-to-use, scalable distributed version control system.

CVE-2017-17458

In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository.
Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.

CVE-2018-13346

The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data.

CVE-2018-13347

mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction.

CVE-2018-13348

The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not.

CVE-2018-1000132

Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1.

CVE-2019-3902

Symbolic links and subrepositories could be used defeat Mercurial's path-checking logic and write files outside the repository root.

For Debian 9 stretch, these problems have been fixed in version 4.0-1+deb9u2.

We recommend that you upgrade your mercurial packages.

For the detailed security status of mercurial please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/mercurial

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - mercurial: arbitrary command execution in mercurial repo with a git submodule (CVE-2017-17458)

  - mercurial: Buffer underflow in mpatch.c:mpatch_apply() (CVE-2018-13347)

  - Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when     converting a Git repository. (CVE-2016-3069)

  - The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary     code via a crafted git repository name. (CVE-2016-3105)

  - Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to     modify files outside the repository (CVE-2017-1000115)

  - Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-     injection attacks. (CVE-2017-1000116)

  - Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol     server that can result in Unauthorized data access. This attack appear to be exploitable via network     connectivity. This vulnerability appears to have been fixed in 4.5.1. (CVE-2018-1000132)

  - The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the     fragment start is past the end of the original data, aka OVE-20180430-0004. (CVE-2018-13346)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

A vulnerability was found in the Mercurial version control system which could lead to remote arbitrary code execution.

CVE-2017-17458

A specially malformed Mercurial repository could cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the parent repository.
Typical use of Mercurial prevents construction of such repositories, but they can be created programmatically.

For Debian 7 'Wheezy', these problems have been fixed in version 2.2.2-4+deb7u6.

We recommend that you upgrade your mercurial packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - mercurial: arbitrary command execution in mercurial repo with a git submodule (CVE-2017-17458)

  - The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary     code via a crafted git repository name. (CVE-2016-3105)

  - A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat     Mercurial's path-checking logic and write files outside a repository. (CVE-2019-3902)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
106870	Atlassian SourceTree 0.5.1.0 < 2.4.7.0 Multiple Vulnerabilities	Nessus	Windows	2/16/2018	10/20/2023	critical
105343	openSUSE Security Update : mercurial (openSUSE-2017-1388)	Nessus	SuSE Local Security Checks	12/18/2017	1/19/2021	critical
149194	EulerOS 2.0 SP3 : mercurial (EulerOS-SA-2021-1816)	Nessus	Huawei Local Security Checks	4/30/2021	1/2/2024	critical
110927	Debian DLA-1414-2 : mercurial regression update	Nessus	Debian Local Security Checks	7/6/2018	1/11/2021	critical
139244	Debian DLA-2293-1 : mercurial security update	Nessus	Debian Local Security Checks	8/3/2020	2/27/2024	critical
195843	RHEL 6 : mercurial (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
105488	Debian DLA-1224-1 : mercurial security update	Nessus	Debian Local Security Checks	12/29/2017	1/11/2021	critical
143229	EulerOS 2.0 SP2 : mercurial (EulerOS-SA-2020-2367)	Nessus	Huawei Local Security Checks	11/24/2020	2/8/2024	critical
195752	RHEL 7 : mercurial (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical