PT-2017-13491 · Newsbeuter+3 · Newsbeuter+3

Noctux · Published 2017-09-17 · Updated 2020-10-21 · CVE-2017-14500

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Newsbeuter versions 0.3 through 2.9

Description The issue is related to improper neutralization of special elements used in an OS command in the podcast playback function of Podbeuter. This allows remote attackers to perform user-assisted code execution by crafting an RSS item with a media enclosure that includes shell metacharacters in its filename. The issue is related to the files pb controller.cpp and queueloader.cpp.

Recommendations For Newsbeuter versions 0.3 through 2.9, consider disabling the podcast playback function until a patch is available to prevent user-assisted code execution. Restrict access to the podcast feature to minimize the risk of exploitation. Avoid using the podcast playback function with RSS items that include media enclosures with potentially malicious filenames. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

ALT-PU-2017-2368

CVE-2017-14500

DLA-1104-1

DSA-3977-1

OPENSUSE-SU-2018_0229-1

USN-4585-1

Affected Products

Alt Linux

Newsbeuter

Suse

Ubuntu

References · 17

• https://github.com/akrennmair/newsbeuter/issues/598 · Vendor Advisory
• https://github.com/akrennmair/newsbeuter/commit/26f5a4350f3ab5507bb8727051c87bb04660f333 · Patch
• https://github.com/akrennmair/newsbeuter/commit/c8fea2f60c18ed30bdd1bb6f798e994e51a58260 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-14500 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4585-1 · Vendor Advisory
• https://usn.ubuntu.com/4585-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14500 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-14500 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3977-1 · Vendor Advisory
• http://debian.org/security/2017/dsa-3977 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12904 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14500 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2017-14500 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4585-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-14500 · Security Note