Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-4515HistoryDec 20, 2022 - 7:15 p.m.
CVE-2022-4515
2022-12-2019:15:00
Debian Security Bug Tracker
security-tracker.debian.org
13
0.001 Low
EPSS
Percentile
33.0%
A flaw was found in Exuberant Ctags in the way it handles the “-o” option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | exuberant-ctags | < 1:5.9~svn20110310-18 | exuberant-ctags_1:5.9~svn20110310-18_all.deb |
| Debian | 11 | all | exuberant-ctags | < 1:5.9~svn20110310-14+deb11u1 | exuberant-ctags_1:5.9~svn20110310-14+deb11u1_all.deb |
| Debian | 10 | all | exuberant-ctags | < 1:5.9~svn20110310-12+deb10u1 | exuberant-ctags_1:5.9~svn20110310-12+deb10u1_all.deb |
| Debian | 999 | all | exuberant-ctags | < 1:5.9~svn20110310-18 | exuberant-ctags_1:5.9~svn20110310-18_all.deb |
| Debian | 13 | all | exuberant-ctags | < 1:5.9~svn20110310-18 | exuberant-ctags_1:5.9~svn20110310-18_all.deb |
| Debian | 12 | all | universal-ctags | < 5.9.20210829.0-1 | universal-ctags_5.9.20210829.0-1_all.deb |
| Debian | 11 | all | universal-ctags | < 0+git20200824-1.1 | universal-ctags_0+git20200824-1.1_all.deb |
| Debian | 10 | all | universal-ctags | < 0+git20181215-2 | universal-ctags_0+git20181215-2_all.deb |
| Debian | 999 | all | universal-ctags | < 5.9.20210829.0-1 | universal-ctags_5.9.20210829.0-1_all.deb |
| Debian | 13 | all | universal-ctags | < 5.9.20210829.0-1 | universal-ctags_5.9.20210829.0-1_all.deb |
Related
nessus
nessus
RHEL 7 : ctags (Unpatched Vulnerability)
2024-05-11 00:00:00
Oracle Linux 8 : ctags (ELSA-2023-2863)
2023-05-24 00:00:00
CentOS 8 : ctags (CESA-2023:2863)
2023-05-16 00:00:00
mageia
mageia
Updated ctags packages fix security vulnerability
2023-01-13 20:37:09
almalinux
almalinux
Moderate: ctags security update
2023-05-16 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5820-1)
2023-01-24 00:00:00
openSUSE: Security Advisory for ctags (SUSE-SU-2023:0225-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0225-1)
2023-02-02 00:00:00
redhat
redhat
(RHSA-2023:2863) Moderate: ctags security update
2023-05-16 05:56:44
osv
osv
exuberant-ctags vulnerability
2023-01-24 02:19:20
exuberant-ctags - security update
2022-12-31 00:00:00
Moderate: ctags security update
2023-05-16 00:00:00
debian
debian
[SECURITY] [DLA 3254-1] exuberant-ctags security update
2022-12-31 12:49:05
oraclelinux
oraclelinux
ctags security update
2023-05-24 00:00:00
ubuntucve
ubuntucve
CVE-2022-4515
2022-12-20 00:00:00
cvelist
cvelist
CVE-2022-4515
2022-12-20 00:00:00
amazon
amazon
Medium: ctags
2023-11-09 19:19:00
redhatcve
redhatcve
CVE-2022-4515
2022-12-19 18:14:44
ubuntu
ubuntu
exuberant-ctags vulnerability
2023-01-24 00:00:00
veracode
veracode
Arbitrary Code Execution
2023-03-13 01:07:11
prion
prion
Design/Logic Flaw
2022-12-20 19:15:00
cve
cve
CVE-2022-4515
2022-12-20 19:15:00
cbl_mariner
cbl_mariner
CVE-2022-4515 affecting package ctags for versions less than 6.1.0-1
2024-03-19 17:21:46
CVE-2022-4515 affecting package ctags 5.8-6
2024-05-28 09:07:30