CVE:CVE-2017-14176
CNNVD:CNNVD-201709-263
Canonical Bazaar是Canonical公司赞助的一套开源的版本控制系统。
Canonical Bazaar 2.7.0及之前的版本中存在安全漏洞。远程攻击者可借助主机名中首字母为‘/’的bzr+ssh URL利用该漏洞执行任意命令。
solution:Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.04,and avoid the version 14.04,16.04,17.04; Upgrade canonical bazaar to a higher version than 2.7.0,and avoid the version (,2.7.0]