AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-16228

CRITICAL · CVSS 9.8 EPSS 3.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-10-29 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE
CVE-2017-16228
Severity
CRITICAL
CVSS
9.8
EPSS
3.39%

Original NVD Description

Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-1000116, and CVE-2017-1000117.