PT-2017-14823 · Debian+1 · Sensible-Utils+1

Gabriel Corona · Published 2017-12-11 · Updated 2018-03-16 · CVE-2017-17512

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sensible-utils versions prior to 0.0.11

Description The issue allows remote attackers to conduct argument-injection attacks via a crafted URL. This is possible because the sensible-browser in sensible-utils does not validate strings before launching the program specified by the BROWSER environment variable. For example, a crafted URL could include a --proxy-pac-file argument to exploit this issue.

Recommendations For versions prior to 0.0.11, update to version 0.0.11 or later to resolve the issue. As a temporary workaround, consider validating the BROWSER environment variable to prevent argument-injection attacks. Restrict access to the sensible-browser to minimize the risk of exploitation. Avoid using untrusted URLs to prevent potential attacks until the issue is resolved.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2017-17512

DLA-1209-1

DSA-4071-1

USN-3584-1

Affected Products

Ubuntu

Sensible-Utils

References · 15

• 🔥 https://bugs.debian.org/881767 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-17512 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-17512 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-17512 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3584-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-17512 · Security Note
• https://ubuntu.com/security/notices/USN-3584-1 · Vendor Advisory
• https://debian.org/security/2017/dsa-4071 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4071-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-17512 · Security Note
• https://osv.dev/vulnerability/CVE-2017-17512 · Vendor Advisory
• https://usn.ubuntu.com/3584-1 · Vendor Advisory
• http://metadata.ftp-master.debian.org/changelogs/main/s/sensible-utils/sensible-utils_0.0.11_changelog · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-17512 · Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2017/12/msg00012.html · Note