CVE-2022-4515 — OS Command Injection in Exuberant-ctags

CWE-78 — OS Command Injection7 documents7 sources
Severity
7.8HIGHNVD
EPSS
1.0%
top 22.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Debian Exuberant-ctagsDebian Universal-ctagsDebian Linux+7 more
Timeline
PublishedDec 20
Latest updateJan 24

Description

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages9 packages

▶debiandebian/exuberant-ctags< exuberant-ctags 1:5.9~svn20110310-18 (bookworm)
▶debiandebian/universal-ctags< exuberant-ctags 1:5.9~svn20110310-18 (bookworm)

Also affects: Debian Linux 10.0

🔴Vulnerability Details

2
GHSA
GHSA-qr9x-29jh-mg6x: A flaw was found in Exuberant Ctags in the way it handles the "-o" option↗2022-12-20
▶
OSV
CVE-2022-4515: A flaw was found in Exuberant Ctags in the way it handles the "-o" option↗2022-12-20
▶

📋Vendor Advisories

4
Ubuntu
exuberant-ctags vulnerability↗2023-01-24
▶
Red Hat
ctags: arbitrary command execution via a tag file with a crafted filename↗2022-12-19
▶
Microsoft
A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file res↗2022-12-13
▶
Debian
CVE-2022-4515: exuberant-ctags - A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This ...↗2022
▶