CVE-2023-1350
published 2023-03-11CVE-2023-1350: A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the…
PriorityP261critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.38%
81.8th percentile
A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-item-link.txt leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222848.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | liferea | < liferea 1.14.1-1 (bookworm) | liferea 1.14.1-1 (bookworm) |
| liferea_project | liferea | < 1.14.1 | 1.14.1 |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
| liferea_project | liferea | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Monitor for OS command injection via the `source` argument in liferea's Feed Enrichment component — specifically pipe-prefixed payloads (e.g. starting with '|') passed to update_job_run() in src/update.c. ↗
- →Alert on creation of unexpected files under /tmp/ by the liferea process, as the proof-of-concept payload redirects command output to /tmp/bad-item-link.txt. ↗
- ·Debian bullseye remains unpatched (open); only bookworm, forky, sid, and trixie have resolved the issue at version 1.14.1-1. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2023-1350: liferea - A vulnerability was found in liferea. It has been rated as critical. Affected by...
vendor_debian·2023·CVSS 6.3
CVE-2023-1350 [MEDIUM] CVE-2023-1350: liferea - A vulnerability was found in liferea. It has been rated as critical. Affected by...
A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-item-link.txt leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222848.
Scope: local
bookworm: resolved (fixed in 1.14.1-1)
bullseye: open
forky: resolved (fixed in 1.14.1-1)
sid: resolved (fixed in 1.14.1-1)
trixie: resolved (fixed in 1.14.1-1)
OSV
CVE-2023-1350: A vulnerability was found in liferea
osv·2023-03-11·CVSS 9.8
CVE-2023-1350 [CRITICAL] CVE-2023-1350: A vulnerability was found in liferea
A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-item-link.txt leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222848.
GHSA
GHSA-9q9p-r5vc-g557: A vulnerability was found in liferea
ghsa_unreviewed·2023-03-11
CVE-2023-1350 [CRITICAL] CWE-78 GHSA-9q9p-r5vc-g557: A vulnerability was found in liferea
A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-item-link.txt leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222848.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-03-11
Published