📦

bazaar

Vendor: canonical

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 18 Total Indexed
Avg. EPSS 5.98% Exploit Prob.
Latest CVE CVE-2017-14176 Nov 27

Security Vulnerability Index

Page 1 / 2
8.8 CVSS
CVE-2017-14176
RCE

Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.

EPSS: 5.98%