CVE-2018-13348 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-13348 Interim 1 24 2023-09-12T00:29:56Z current 2021-05-30T14:14:54Z 2023-09-12T00:29:56Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-13348 The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-July/004284.html E-Mail link for SUSE-SU-2018:1990-1 https://lists.suse.com/pipermail/sle-security-updates/2018-July/004290.html E-Mail link for SUSE-SU-2018:1996-1 https://lists.suse.com/pipermail/sle-security-updates/2018-July/004292.html E-Mail link for SUSE-SU-2018:1998-1 https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00030.html E-Mail link for openSUSE-SU-2018:2023-1 https://lists.opensuse.org/opensuse-security-announce/2018-07/msg00049.html E-Mail link for openSUSE-SU-2018:2132-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Python 2 15 SP1 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Python 2 15 SP1 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Python 2 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Python 2 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Python 2 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Python 2 15 SP1 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Python 2 15 SP1 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Python 2 15 SP1 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Python 2 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.0 openSUSE Tumbleweed mercurial mercurial-2.3.2-0.18.9.1 mercurial-2.8.2-15.13.1 mercurial-4.5.2-3.3.1 mercurial-4.5.2-lp150.2.3.1 mercurial-5.9.1-150400.1.8 mercurial-5.9.1-2.1 mercurial-lang-4.5.2-lp150.2.3.1 mercurial-lang-5.9.1-2.1 mercurial-tests-5.9.1-2.1 mercurial-5.9.1-150400.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 mercurial-5.9.1-150400.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 mercurial-4.5.2-3.3.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 mercurial-4.5.2-3.3.1 as a component of SUSE Linux Enterprise Module for Python 2 15 SP1 mercurial-4.5.2-3.3.1 as a component of SUSE Linux Enterprise Module for Python 2 15 SP2 mercurial-4.5.2-3.3.1 as a component of SUSE Linux Enterprise Module for Python 2 15 SP3 mercurial-2.3.2-0.18.9.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mercurial-2.8.2-15.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 mercurial-2.8.2-15.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 mercurial-2.8.2-15.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 mercurial-4.5.2-lp150.2.3.1 as a component of openSUSE Leap 15.0 mercurial-lang-4.5.2-lp150.2.3.1 as a component of openSUSE Leap 15.0 mercurial-5.9.1-2.1 as a component of openSUSE Tumbleweed mercurial-lang-5.9.1-2.1 as a component of openSUSE Tumbleweed mercurial-tests-5.9.1-2.1 as a component of openSUSE Tumbleweed mercurial as a component of SUSE CaaS Platform 4.0 mercurial as a component of SUSE Enterprise Storage 6 mercurial as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mercurial as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mercurial as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actually are not, aka OVE-20180430-0001. CVE-2018-13348 SUSE Linux Enterprise Module for Basesystem 15 SP4:mercurial-5.9.1-150400.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP5:mercurial-5.9.1-150400.1.8 SUSE Linux Enterprise Module for Development Tools 15:mercurial-4.5.2-3.3.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1:mercurial-lang-4.5.2-3.3.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2:mercurial-lang-4.5.2-3.3.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3:mercurial-lang-4.5.2-3.3.1 SUSE Linux Enterprise Module for Python 2 15 SP1:mercurial-4.5.2-3.3.1 SUSE Linux Enterprise Module for Python 2 15 SP2:mercurial-4.5.2-3.3.1 SUSE Linux Enterprise Module for Python 2 15 SP3:mercurial-4.5.2-3.3.1 SUSE Linux Enterprise Software Development Kit 11 SP4:mercurial-2.3.2-0.18.9.1 SUSE Linux Enterprise Software Development Kit 12 SP3:mercurial-2.8.2-15.13.1 SUSE Linux Enterprise Software Development Kit 12 SP4:mercurial-2.8.2-15.13.1 SUSE Linux Enterprise Software Development Kit 12 SP5:mercurial-2.8.2-15.13.1 openSUSE Leap 15.0:mercurial-4.5.2-lp150.2.3.1 openSUSE Leap 15.0:mercurial-lang-4.5.2-lp150.2.3.1 openSUSE Tumbleweed:mercurial-5.9.1-2.1 openSUSE Tumbleweed:mercurial-lang-5.9.1-2.1 openSUSE Tumbleweed:mercurial-tests-5.9.1-2.1 SUSE CaaS Platform 4.0:mercurial SUSE Enterprise Storage 6:mercurial SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:mercurial SUSE Linux Enterprise Server 15 SP1-LTSS:mercurial SUSE Linux Enterprise Server for SAP Applications 15 SP1:mercurial moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L