http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade fossil | Jul 30, 2024 | Dec 7, 2017 |
| Gentoo Linux | — | Upgrade dev-vcs/fossil. | Jan 29, 2018 | Dec 7, 2017 |
| Suse | — | Upgrade fossil-debuginfoUpgrade fossilUpgrade fossil-debugsource | Dec 12, 2017 | Dec 7, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Dec 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub