CVE-2018-13347
mercurial: mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.
CVE-2018-13347 is fixed in 2 products on 1 platform, first by mercurial 4.5.3-1ubuntu2.1, released July 5, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0272
86th percentile
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| mercurial · Ubuntu 18.04.6 LTS (bionic) | 4.5.3-1ubuntu2.1 | mercurial 4.5.3-1ubuntu2.1 | Jul 5, 2018 |
| mercurial-common · Ubuntu 18.04.6 LTS (bionic) | 4.5.3-1ubuntu2.1 | mercurial-common 4.5.3-1ubuntu2.1 | Jul 5, 2018 |