PT-2017-13491 · Newsbeuter+3 · Newsbeuter+3

Noctux · Publicado 2017-09-17 · Atualizado 2020-10-21 · CVE-2017-14500

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Newsbeuter versions 0.3 through 2.9

Description The issue is related to improper neutralization of special elements used in an OS command in the podcast playback function of Podbeuter. This allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure that includes shell metacharacters in its filename. The issue is related to the files pb controller.cpp and queueloader.cpp.

Recommendations For Newsbeuter versions 0.3 through 2.9, consider disabling the podcast playback function until a patch is available to prevent user-assisted code execution. Restrict access to the podcast feature to minimize the risk of exploitation. Avoid using the podcast playback function with RSS items that include media enclosures with potentially malicious filenames. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

ALT-PU-2017-2368

CVE-2017-14500

DLA-1104-1

DSA-3977-1

OPENSUSE-SU-2018_0229-1

USN-4585-1

Produtos afetados

Alt Linux

Newsbeuter

Suse

Ubuntu

Referências · 17

• https://github.com/akrennmair/newsbeuter/issues/598 · Aviso do Fabricante
• https://github.com/akrennmair/newsbeuter/commit/26f5a4350f3ab5507bb8727051c87bb04660f333 · Correção
• https://github.com/akrennmair/newsbeuter/commit/c8fea2f60c18ed30bdd1bb6f798e994e51a58260 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-14500 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2017/09/16/1 · Nota
• https://security.alpinelinux.org/vuln/CVE-2017-14500 · Nota
• https://osv.dev/vulnerability/USN-4585-1 · Aviso do Fabricante
• https://usn.ubuntu.com/4585-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-14500 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-14500 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-3977-1 · Aviso do Fabricante
• http://debian.org/security/2017/dsa-3977 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-12904 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14500 · Nota de Segurança
• https://osv.dev/vulnerability/ALPINE-CVE-2017-14500 · Aviso do Fabricante