p PatchFirst

CVE-2010-4237

CVE-2010-4237

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.

CVSS 5.9 · Medium · EPSS 0.8% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • mercurial

    Versions
    • 1.6.4: Affected

    No fix published

  • mercurial Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.6.4-1

    Update to 1.6.4-1

  • mercurial Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.6.4-1

    Update to 1.6.4-1

  • mercurial Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.6.4-1

    Update to 1.6.4-1

  • mercurial PyPI

    Versions
    • 0.8.1
    • 0.9
    • 0.9.1
    • 0.9.2
    • 0.9.3
    • 0.9.4
    • 0.9.5
    • 1.0
    • 1.0.1
    • 1.0.2
    • 1.1
    • 1.1.1
    • 1.1.2
    • 1.2
    • 1.2.1
    • 1.3
    • 1.3.1
    • 1.4
    • 1.4.1
    • 1.4.2
    • 1.4.3
    • 1.5
    • 1.5.1
    • 1.5.2
    • 1.5.3
    • 1.5.4
    • 1.6
    • 1.6.1
    • 1.6.2
    • 1.6.3
    Affected ranges
    • ECOSYSTEM: < 1.6.4

    Update to 1.6.4

Original sources

Check your server →