PT-2017-4251 · Luatex+10 · Luatex+10
Max Chernoff
·
Publicado
2017-03-01
·
Atualizado
2025-01-31
·
CVE-2023-32700
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
LuaTeX versions prior to 1.17.0
TeX Live versions prior to 2023 r66984
MiKTeX versions prior to 23.5
Description
The issue is related to the
io.popen() function in the luatex-core.lua component, which lacks input validation. This allows an attacker to execute arbitrary shell commands when a TeX file from an untrusted source is compiled. The vulnerability can be exploited by accessing the original io.popen through luatex-core.lua.Recommendations
For LuaTeX versions prior to 1.17.0, update to version 1.17.0 or later to resolve the issue.
For TeX Live versions prior to 2023 r66984, update to version 2023 r66984 or later to resolve the issue.
For MiKTeX versions prior to 23.5, update to version 23.5 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
io.popen() function in luatex-core.lua to minimize the risk of exploitation.Correção
Command Injection
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Almalinux
Astra Linux
Centos
Linuxmint
Luatex
Miktex
Red Hat
Rocky Linux
Suse
Tex Live
Ubuntu