{"schemaVersion":3,"id":"CVE-2017-8386","aliases":["ALPINE-CVE-2017-8386","MGASA-2017-0153","SUSE-SU-2017:1357-1","SUSE-SU-2017:1432-1","UBUNTU-CVE-2017-8386","USN-3287-1","DEBIAN-CVE-2017-8386","DLA-938-1","DSA-3848-1"],"status":"published","duplicateOf":null,"title":null,"description":"git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote authenticated users to gain privileges via a repository name that starts with a - (dash) character.","dates":{"published":"2017-06-01T16:00:00.000Z","modified":"2024-08-05T16:34:22.740Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.5,"severity":"medium","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Alpine","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Debian","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true}]},"epss":{"probability":0.12387,"percentile":0.96171,"severity":"medium","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.12387},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10261,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.12387,"percentile":0.96171}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10261,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.12387,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.12387,"percentile":0.96171}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_E004B632B7C29504","name":"Exploit Reference (ubuntu.com)","source":"reference","url":"http://www.ubuntu.com/usn/USN-3287-1","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[],"affected":[{"vendor":"alpine","product":"git","name":"git","label":"git","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/git","purlType":"apk","versions":[{"text":"< 2.6.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.7-r0","eol":null,"hubHref":null},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"14.04","noFixRecorded":false,"fixedIn":null},{"text":"16.04","noFixRecorded":false,"fixedIn":null},{"text":"16.10","noFixRecorded":false,"fixedIn":null},{"text":"17.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"14.04 | 16.04 | 16.10 | 17.04","eol":{"isEol":true,"eolDate":"2019-04-02T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"14.04","label":"14.04 'Trusty Tahr' (LTS)","eolFrom":"2019-04-02T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"14.04.6"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"git","name":"git","label":"git","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/git","purlType":"deb","versions":[{"text":"< 1:2.11.0-3","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.1.4-2.1+deb8u3","noFixRecorded":false,"fixedIn":null},{"text":"< 1:1.7.10.4-1+wheezy4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.11.0-3 | < 1:2.1.4-2.1+deb8u3 | < 1:1.7.10.4-1+wheezy4","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"git","name":"git","label":"git","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/git","purlType":"deb","versions":[{"text":"< 1:1.9.1-1ubuntu0.5","noFixRecorded":false,"fixedIn":null},{"text":"< 1:2.7.4-0ubuntu1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:1.9.1-1ubuntu0.5 | < 1:2.7.4-0ubuntu1.1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0","eol":{"isEol":true,"eolDate":"2020-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Jessie)","eolFrom":"2020-06-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"8.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"24","noFixRecorded":false,"fixedIn":null},{"text":"25","noFixRecorded":false,"fixedIn":null},{"text":"26","noFixRecorded":false,"fixedIn":null}],"versionsText":"24 | 25 | 26","eol":{"isEol":true,"eolDate":"2017-08-08T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"24","label":"24","eolFrom":"2017-08-08T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"git","product":"git-shell","name":"git-shell","label":"git-shell","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/git/git-shell"},{"vendor":"mageia","product":"git","name":"git","label":"git","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/git","purlType":"rpm","versions":[{"text":"< 2.7.4-1.1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.4-1.1.mga5","eol":null,"hubHref":null},{"vendor":"opensuse","product":"leap","name":"leap","label":"leap","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"42.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"42.1","eol":{"isEol":true,"eolDate":"2017-05-17T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"42.1","label":"Leap 42.1","eolFrom":"2017-05-17T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/leap"},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server 12 SP1","name":"git","label":"git&distro=SUSE Linux Enterprise Server 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server 12 SP1","purlType":"rpm","versions":[{"text":"< 2.12.3-26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server 12 SP2","name":"git","label":"git&distro=SUSE Linux Enterprise Server 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server 12 SP2","purlType":"rpm","versions":[{"text":"< 2.12.3-26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","name":"git","label":"git&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2","purlType":"rpm","versions":[{"text":"< 2.12.3-26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"git","label":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 2.12.3-26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"git","label":"git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 2.12.3-26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","name":"git","label":"git&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","purlType":"rpm","versions":[{"text":"< 1.7.12.4-0.17.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.12.4-0.17.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","name":"git","label":"git&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Software Development Kit 12 SP1","purlType":"rpm","versions":[{"text":"< 2.12.3-26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","name":"git","label":"git&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Linux Enterprise Software Development Kit 12 SP2","purlType":"rpm","versions":[{"text":"< 2.12.3-26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.3-26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"git&distro=SUSE Studio Onsite 1.3","name":"git","label":"git&distro=SUSE Studio Onsite 1.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/git&distro=SUSE Studio Onsite 1.3","purlType":"rpm","versions":[{"text":"< 1.7.12.4-0.17.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.12.4-0.17.1","eol":null,"hubHref":null}],"affectedCount":18,"eol":{"hasEol":true,"count":4},"references":[{"url":"http://public-inbox.org/git/xmqq8tm5ziat.fsf%40gitster.mtv.corp.google.com/","label":"public-inbox.org/git/xmqq8tm5ziat.fsf%40gitster.mtv.corp.google.com/","hostname":"public-inbox.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"http://www.ubuntu.com/usn/USN-3287-1","label":"www.ubuntu.com/usn/USN-3287-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Exploit","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ISHYFLM2ACYHHY3JHCLF75X7UF4ZMDM/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPYRN7APMHY4ZFDPAKD22J5R4QJFY2JP/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://security.gentoo.org/glsa/201706-04","label":"security.gentoo.org/glsa/201706-04","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDS3LSJJ3YGGQYIVPKQDVOCXWDSF6JGF/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://insinuator.net/2017/05/git-shell-bypass-by-abusing-less-cve-2017-8386/","label":"insinuator.net/2017/05/git-shell-bypass-by-abusing-less-cve-2017-8386/","hostname":"insinuator.net","tags":["X Refsource MISC","Mitigation","Third Party Advisory","REPORT"]},{"url":"https://kernel.googlesource.com/pub/scm/git/git/+/3ec804490a265f4c418a321428c12f3f18b7eff5","label":"kernel.googlesource.com/pub/scm/git/git/+/3ec804490a265f4c418a321428c12f3f18b7eff5","hostname":"kernel.googlesource.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1038479","label":"www.securitytracker.com/id/1038479","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2491","label":"access.redhat.com/errata/RHSA-2017:2491","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://lists.opensuse.org/opensuse-updates/2017-05/msg00090.html","label":"lists.opensuse.org/opensuse-updates/2017-05/msg00090.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2004","label":"access.redhat.com/errata/RHSA-2017:2004","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.securityfocus.com/bid/98409","label":"www.securityfocus.com/bid/98409","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3848","label":"www.debian.org/security/2017/dsa-3848","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory","VDB Entry"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-8386","label":"security.alpinelinux.org/vuln/CVE-2017-8386","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0153.html","label":"advisories.mageia.org/MGASA-2017-0153.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20827","label":"bugs.mageia.org/show_bug.cgi?id=20827","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.debian.org/security/2017/dsa-3848","label":"www.debian.org/security/2017/dsa-3848","hostname":"www.debian.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171357-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171357-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1038395","label":"bugzilla.suse.com/1038395","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8386","label":"www.suse.com/security/cve/CVE-2017-8386","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171432-1/","label":"www.suse.com/support/update/announcement/2017/suse-su-20171432-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-8386","label":"ubuntu.com/security/CVE-2017-8386","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"http://lkml.iu.edu/hypermail/linux/kernel/1705.1/01337.html","label":"lkml.iu.edu/hypermail/linux/kernel/1705.1/01337.html","hostname":"lkml.iu.edu","tags":["REPORT"]},{"url":"http://lkml.iu.edu/hypermail/linux/kernel/1705.1/01346.html","label":"lkml.iu.edu/hypermail/linux/kernel/1705.1/01346.html","hostname":"lkml.iu.edu","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3287-1","label":"ubuntu.com/security/notices/USN-3287-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8386","label":"www.cve.org/CVERecord?id=CVE-2017-8386","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-8386","label":"security-tracker.debian.org/tracker/CVE-2017-8386","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10786-1","RHSA-2017:2004","RHSA-2017:2491"],"duplicates":[],"related":["OPENSUSE-SU-2024:10786-1"]},"timeline":[{"kind":"published","date":"2017-06-01T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T16:34:22.740Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":48,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T08:11:45.458Z","stale":false,"partial":false}}