The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to     modify files outside the repository (CVE-2017-1000115)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-201709-18 (Mercurial: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mercurial. Please       review the referenced CVE identifiers for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process.
  Workaround :

    There is no known workaround at this time.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2489 advisory.

    [2.6.2-8]
    - Fix CVE-2017-1000115 and CVE-2017-1000116

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for mercurial is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects.

Security Fix(es) :

* A vulnerability was found in the way Mercurial handles path auditing and caches the results. An attacker could abuse a repository with a series of commits mixing symlinks and regular files/directories to trick Mercurial into writing outside of a given repository.
(CVE-2017-1000115)

* A shell command injection flaw related to the handling of 'ssh' URLs has been discovered in Mercurial. This can be exploited to execute shell commands with the privileges of the user running the Mercurial client, for example, when performing a 'checkout' or 'update' action on a sub-repository within a malicious repository or a legitimate repository containing a malicious commit. (CVE-2017-1000116)

Red Hat would like to thank the Mercurial Security Team for reporting CVE-2017-1000115 and the Subversion Team for reporting CVE-2017-1000116.

According to the versions of the mercurial package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in the way Mercurial handles     path auditing and caches the results. An attacker could     abuse a repository with a series of commits mixing     symlinks and regular files/directories to trick     Mercurial into writing outside of a given repository.
    (CVE-2017-1000115)

  - A shell command injection flaw related to the handling     of 'ssh' URLs has been discovered in Mercurial. This     can be exploited to execute shell commands with the     privileges of the user running the Mercurial client,     for example, when performing a 'checkout' or 'update'     action on a sub-repository within a malicious     repository or a legitimate repository containing a     malicious commit. (CVE-2017-1000116)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

mercurial developers reports :

Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository

Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.

New mercurial packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.

Mercurial Release Notes :

CVE-2017-1000115

Mercurial's symlink auditing was incomplete prior to 4.3, and could be abused to write to files outside the repository.

CVE-2017-1000116

Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks on clients by specifying a hostname starting with
-oProxyCommand. This is also present in Git (CVE-2017-1000117) and Subversion (CVE-2017-9800), so please patch those tools as well if you have them installed.

Security fix for CVE-2017-1000115, CVE-2017-1000116

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1906:02 advisory.

    Mercurial is a fast, lightweight source control management system designed     for efficient handling of very large distributed projects.
    Quick start: http://www.selenic.com/mercurial/wiki/index.cgi/QuickStart     Tutorial: http://www.selenic.com/mercurial/wiki/index.cgi/Tutorial     Extensions: http://www.selenic.com/mercurial/wiki/index.cgi/CategoryExtension     CVE-2017-1000
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
220085	Linux Distros Unpatched Vulnerability : CVE-2017-1000115	Nessus	Misc.	2025/3/4	2026/7/19	high
103446	GLSA-201709-18 : Mercurial: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/9/25	2025/11/20	critical
102571	Oracle Linux 7 : mercurial (ELSA-2017-2489)	Nessus	Oracle Linux Local Security Checks	2017/8/18	2024/10/23	critical
102880	CentOS 7 : mercurial (CESA-2017:2489)	Nessus	CentOS Local Security Checks	2017/9/1	2021/1/4	critical
103076	EulerOS 2.0 SP2 : mercurial (EulerOS-SA-2017-1218)	Nessus	Huawei Local Security Checks	2017/9/11	2025/11/24	critical
103861	FreeBSD : mercurial -- multiple issues (b0628e53-092a-4037-938b-29805a7cd31b)	Nessus	FreeBSD Local Security Checks	2017/10/17	2025/11/18	critical
102434	Slackware 14.0 / 14.1 / 14.2 / current : mercurial (SSA:2017-223-03)	Nessus	Slackware Local Security Checks	2017/8/14	2025/12/2	critical
102465	FreeBSD : Mercurial -- multiple vulnerabilities (1d33cdee-7f6b-11e7-a9b5-3debb10a6871)	Nessus	FreeBSD Local Security Checks	2017/8/14	2025/12/2	critical
102832	Fedora 26 : mercurial (2017-f03b04acbb)	Nessus	Fedora Local Security Checks	2017/8/30	2025/11/25	critical
289993	MiracleLinux 7 : mercurial-2.6.2-8.el7 (AXSA:2017-1906:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical

检测

插件搜索

high

critical

critical

critical

critical

critical

critical

critical

critical

critical