CVE-2016-3105: High severity debian linux vulnerability
Published May 9, 2016
·Updated
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
Affected Software
3 affected componentsFixes available
pip/mercurial<3.8
3.8
Debian Debian Linux=8.0
Mercurial Mercurial<=3.7.3
Event History
May 9, 2016
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·02:37 AM
Frequently Asked Questions
1
What is the severity of CVE-2016-3105?
CVE-2016-3105 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2016-3105?
To fix CVE-2016-3105, upgrade to Mercurial version 3.8 or later.
3
Which versions of Mercurial are affected by CVE-2016-3105?
Mercurial versions prior to 3.8, specifically those up to and including 3.7.3, are affected by CVE-2016-3105.
4
Can CVE-2016-3105 be exploited remotely?
Yes, CVE-2016-3105 can be exploited remotely by context-dependent attackers through a crafted git repository name.
5
What impact does CVE-2016-3105 have on affected systems?
CVE-2016-3105 can lead to the execution of arbitrary code on affected systems, compromising their integrity.