CVE-2016-3630 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-3630 Interim 1 40 2025-11-05T04:29:25Z current 2021-05-30T13:40:47Z 2025-11-05T04:29:25Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-3630 The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2016-April/001994.html E-Mail link for SUSE-SU-2016:1010-1 https://lists.suse.com/pipermail/sle-security-updates/2016-April/001995.html E-Mail link for SUSE-SU-2016:1011-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PHDLEUYNBIL5FZIMFLESR3L7CFGYFZJD/#PHDLEUYNBIL5FZIMFLESR3L7CFGYFZJD E-Mail link for openSUSE-SU-2016:1016-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OJUAL24Q7Y65ABKO3V2BKY3OMHKKCZS7/#OJUAL24Q7Y65ABKO3V2BKY3OMHKKCZS7 E-Mail link for openSUSE-SU-2016:1073-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Python 2 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Tumbleweed mercurial mercurial-2.3.2-0.11.1 mercurial-2.8.2-14.1 mercurial-2.8.2-15.13.1 mercurial-2.8.2-6.1 mercurial-2.8.2-9.1 mercurial-4.0-1.1 mercurial-4.5.2-1.19 mercurial-5.9.1-150400.1.8 mercurial-5.9.1-150400.3.3.1 mercurial-5.9.1-150400.3.6.1 mercurial-7.0.1-160000.2.2 mercurial-lang-4.0-1.1 mercurial-lang-7.0.1-160000.2.2 mercurial-5.9.1-150400.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 mercurial-5.9.1-150400.1.8 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 mercurial-5.9.1-150400.3.3.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 mercurial-5.9.1-150400.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 mercurial-4.5.2-1.19 as a component of SUSE Linux Enterprise Module for Development Tools 15 mercurial-7.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 mercurial-lang-7.0.1-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 mercurial-2.3.2-0.11.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 mercurial-2.8.2-6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 mercurial-2.8.2-6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 mercurial-2.8.2-9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 mercurial-2.8.2-14.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 mercurial-2.8.2-15.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 mercurial-2.8.2-6.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 mercurial-4.0-1.1 as a component of openSUSE Tumbleweed mercurial-lang-4.0-1.1 as a component of openSUSE Tumbleweed mercurial as a component of SUSE CaaS Platform 4.0 mercurial as a component of SUSE Enterprise Storage 6 mercurial as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mercurial as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mercurial as a component of SUSE Linux Enterprise Module for Python 2 15 SP2 mercurial as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mercurial as a component of SUSE Linux Enterprise Server 15-ESPOS mercurial as a component of SUSE Linux Enterprise Server 15-LTSS mercurial as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 mercurial as a component of SUSE Linux Enterprise Server for SAP Applications 15 mercurial as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 mercurial as a component of SUSE Manager Proxy 4.0 mercurial as a component of SUSE Manager Retail Branch Server 4.0 mercurial as a component of SUSE Manager Server 4.0 The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b) short records. CVE-2016-3630 SUSE Linux Enterprise Module for Basesystem 15 SP4:mercurial-5.9.1-150400.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP5:mercurial-5.9.1-150400.1.8 SUSE Linux Enterprise Module for Basesystem 15 SP6:mercurial-5.9.1-150400.3.3.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:mercurial-5.9.1-150400.3.6.1 SUSE Linux Enterprise Module for Development Tools 15:mercurial-4.5.2-1.19 SUSE Linux Enterprise Server 16.0:mercurial-7.0.1-160000.2.2 SUSE Linux Enterprise Server 16.0:mercurial-lang-7.0.1-160000.2.2 SUSE Linux Enterprise Software Development Kit 11 SP4:mercurial-2.3.2-0.11.1 SUSE Linux Enterprise Software Development Kit 12:mercurial-2.8.2-6.1 SUSE Linux Enterprise Software Development Kit 12 SP1:mercurial-2.8.2-6.1 SUSE Linux Enterprise Software Development Kit 12 SP2:mercurial-2.8.2-9.1 SUSE Linux Enterprise Software Development Kit 12 SP3:mercurial-2.8.2-14.1 SUSE Linux Enterprise Software Development Kit 12 SP4:mercurial-2.8.2-15.13.1 SUSE Linux Enterprise Software Development Kit 12 SP5:mercurial-2.8.2-6.1 openSUSE Tumbleweed:mercurial-4.0-1.1 openSUSE Tumbleweed:mercurial-lang-4.0-1.1 SUSE CaaS Platform 4.0:mercurial SUSE Enterprise Storage 6:mercurial SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:mercurial SUSE Linux Enterprise High Performance Computing 15-LTSS:mercurial SUSE Linux Enterprise Module for Python 2 15 SP2:mercurial SUSE Linux Enterprise Server 15 SP1-LTSS:mercurial SUSE Linux Enterprise Server 15-ESPOS:mercurial SUSE Linux Enterprise Server 15-LTSS:mercurial SUSE Linux Enterprise Server Business Critical Linux 15 SP1:mercurial SUSE Linux Enterprise Server for SAP Applications 15 SP1:mercurial SUSE Linux Enterprise Server for SAP Applications 15:mercurial SUSE Manager Proxy 4.0:mercurial SUSE Manager Retail Branch Server 4.0:mercurial SUSE Manager Server 4.0:mercurial moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H