Lucene search
PRIOn knowledge basePRION:CVE-2016-10243HistoryMay 02, 2017 - 2:59 p.m.
Design/Logic Flaw
2017-05-0214:59:00
PRIOn knowledge base
www.prio-n.com
3
TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| fedora | eq | 26 | |
| fedora | eq | 25 |
References
www.debian.org/security/2017/dsa-3803
www.openwall.com/lists/oss-security/2017/03/05/1
www.securityfocus.com/bid/96593
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B7CNJ4HKX7X6V7VMN3UCU7KPY6IX4XRB/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VL6PUKPWEXYIPIAZRIX5ZLQWCSALVLFP/
scumjr.github.io/2016/11/28/pwning-coworkers-thanks-to-latex/
security.gentoo.org/glsa/201709-07
www.tug.org/svn/texlive?view=revision&revision=42605
Related
openvas
openvas
Debian Security Advisory DSA 3803-1 (texlive-base - security update)
2017-03-08 00:00:00
Fedora Update for texlive FEDORA-2017-b72cafa5b4
2017-03-29 00:00:00
Debian: Security Advisory (DLA-847-1)
2018-01-11 00:00:00
nessus
nessus
GLSA-201709-07 : Kpathsea: User-assisted execution of arbitrary code
2017-09-18 00:00:00
Debian DLA-847-1 : texlive-base security update
2017-03-09 00:00:00
EulerOS 2.0 SP3 : texlive (EulerOS-SA-2019-2062)
2019-09-24 00:00:00
cve
cve
CVE-2016-10243
2017-05-02 14:59:00
debian
debian
[SECURITY] [DSA 3803-1] texlive-base security update
2017-03-08 08:39:40
[SECURITY] [DSA 3803-1] texlive-base security update
2017-03-08 08:39:40
[SECURITY] [DLA 847-1] texlive-base security update
2017-03-08 06:23:54
redhatcve
redhatcve
CVE-2016-10243
2017-03-06 12:22:43
ubuntucve
ubuntucve
CVE-2016-10243
2017-05-02 00:00:00
osv
osv
texlive-base - security update
2017-03-08 00:00:00
texlive-base - security update
2017-03-07 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: texlive-2016-33.20160520.fc25
2017-03-29 01:33:05
[SECURITY] Fedora 26 Update: texlive-2016-33.20160520.fc26
2017-04-03 16:10:48
cvelist
cvelist
CVE-2016-10243
2017-05-02 14:00:00
nvd
nvd
CVE-2016-10243
2017-05-02 14:59:00
mageia
mageia
Updated texlive packages fix security vulnerability
2017-05-03 12:48:17
gentoo
gentoo
Kpathsea: User-assisted execution of arbitrary code
2017-09-17 00:00:00
ubuntu
ubuntu
TeX Live vulnerability
2017-08-22 00:00:00
debiancve
debiancve
CVE-2016-10243
2017-05-02 14:59:00