GNU Cvs vulnerabilities

2 CVEs affecting GNU Cvs, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-12836, published 2017-08-24.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-12836, published 2017-08-24. High severity, CVSS 7.5. EPSS: 6.6% chance of exploitation in the next 30 days. CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by…
• CVE-2004-0778, published 2004-10-20. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which…