PT-2018-3461 · Freedesktop.Org+3 · Xdg-Utils+3

Gabriel Corona · Published 2018-05-10 · Updated 2024-06-15 · CVE-2017-18266

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: xdg-utils versions prior to 1.1.3

Description: The issue is related to the open envvar function in xdg-open, which does not properly validate strings before launching the program specified by the BROWSER environment variable. This could allow remote attackers to conduct argument-injection attacks via a crafted URL. For example, using %s in the BROWSER environment variable could lead to such an attack. The vulnerability might also allow a remote attacker to gain unauthorized access to information and disrupt its integrity and availability.

Recommendations: For versions prior to 1.1.3, update to version 1.1.3 or later to resolve the issue. As a temporary workaround, consider validating the strings passed to the open envvar function or restricting the use of the BROWSER environment variable to minimize the risk of exploitation.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

ALT-PU-2018-1958

BDU:2020-01814

CVE-2017-18266

DLA-1384-1

DSA-4211-1

MGASA-2018-0289

OPENSUSE-SU-2018_1596-1

OPENSUSE-SU-2024:11518-1

SUSE-SU-2018:1497-1

SUSE-SU-2018_1497-1

USN-3650-1

Affected Products

Alt Linux

Suse

Ubuntu

Xdg-Utils

References · 41

• https://nvd.nist.gov/vuln/detail/CVE-2017-18266 · Security Note
• https://ubuntu.com/security/notices/USN-3650-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18266 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/ZECHRCR6RWTX46ANDPIAXPMHZ2EOHNJB · Vendor Advisory
• https://debian.org/security/2018/dsa-4211 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20200327SE16 · Vendor Advisory
• https://usn.ubuntu.com/3650-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2018-1958 · Vendor Advisory
• https://bugs.freedesktop.org/show_bug.cgi?id=103807 · Patch
• https://osv.dev/vulnerability/DSA-4211-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0289 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-4211-1 · Vendor Advisory
• https://cgit.freedesktop.org/xdg/xdg-utils/commit/?id=ce802d71c3466d1dbb24f2fe9b6db82a1f899bcb · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-18266 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-18266 · Vendor Advisory