CVE-2017-17513
CVE-2017-17513
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linked_scripts/context/stubs/unix/mtxrun, texmf-dist/scripts/context/stubs/mswin/mtxrun.lua, and texmf-dist/tex/luatex/lualibs/lualibs-os.lua.
CVSS 8.8 · High · EPSS 1.3%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
context Debian:12
- Versions
- 2021.03.05.20230120+dfsg-1
- 2021.03.05.20230120+dfsg-1+deb12u1
- 2021.03.05.20230120+dfsg-2
- 2023.05.05.20230730+dfsg-1
- 2023.05.05.20230730+dfsg-2
- 2024.04.01.20240428+dfsg-1
- 2024.04.01.20240428+dfsg-2
- 2025.03.05.20250324+dfsg-1
- 2025.03.05.20250324+dfsg-2
- 2025.03.05.20250324+dfsg-3
- 2025.09.21.20251026+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
context Debian:13
- Versions
- 2024.04.01.20240428+dfsg-2
- 2025.03.05.20250324+dfsg-1
- 2025.03.05.20250324+dfsg-2
- 2025.03.05.20250324+dfsg-3
- 2025.09.21.20251026+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
context Debian:14
- Versions
- 2024.04.01.20240428+dfsg-2
- 2025.03.05.20250324+dfsg-1
- 2025.03.05.20250324+dfsg-2
- 2025.03.05.20250324+dfsg-3
- 2025.09.21.20251026+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-base Debian:12
- Versions
- 2022.20230122-3
- 2023.20230613-1
- 2023.20230613-2
- 2023.20230613-3
- 2023.20231007-1
- 2023.20231207-1
- 2023.20240207-1
- 2024.20240401-1
- 2024.20240401-2
- 2024.20240401-3
- 2024.20240706-1
- 2024.20240829-1
- 2024.20240829-2
- 2024.20241102-1
- 2024.20241115-1
- 2024.20250114-1
- 2024.20250309-1
- 2025.20250727-1
- 2025.20250727-2
- 2025.20250727-3
- 2025.20250927-1
- 2025.20250927-2
- 2025.20250927-3
- 2025.20250927-4
- 2025.20251127-1
- 2025.20260124-1
- 2026.20260328-1
- 2026.20260328-2
- 2026.20260328-3
- 2026.20260328-4
- 2026.20260527-1
- 2026.20260527-2
- 2026.20260527-3
- 2026.20260711-1
- 2026.20260711-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-base Debian:13
- Versions
- 2024.20250309-1
- 2025.20250727-1
- 2025.20250727-2
- 2025.20250727-3
- 2025.20250927-1
- 2025.20250927-2
- 2025.20250927-3
- 2025.20250927-4
- 2025.20251127-1
- 2025.20260124-1
- 2026.20260328-1
- 2026.20260328-2
- 2026.20260328-3
- 2026.20260328-4
- 2026.20260527-1
- 2026.20260527-2
- 2026.20260527-3
- 2026.20260711-1
- 2026.20260711-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-base Debian:14
- Versions
- 2024.20250309-1
- 2025.20250727-1
- 2025.20250727-2
- 2025.20250727-3
- 2025.20250927-1
- 2025.20250927-2
- 2025.20250927-3
- 2025.20250927-4
- 2025.20251127-1
- 2025.20260124-1
- 2026.20260328-1
- 2026.20260328-2
- 2026.20260328-3
- 2026.20260328-4
- 2026.20260527-1
- 2026.20260527-2
- 2026.20260527-3
- 2026.20260711-1
- 2026.20260711-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Debian:12
- Versions
- 2022.20220321.62855-5.1
- 2022.20220321.62855-5.1+deb12u1
- 2022.20220321.62855-5.1+deb12u2
- 2022.20220321.62855-6
- 2022.20220321.62855-7
- 2022.20220321.62855-8
- 2023.20230311.66589-1
- 2023.20230311.66589-2
- 2023.20230311.66589-3
- 2023.20230311.66589-4
- 2023.20230311.66589-5
- 2023.20230311.66589-6
- 2023.20230311.66589-7
- 2023.20230311.66589-8
- 2023.20230311.66589-9
- 2024.20240313.70630+ds-1
- 2024.20240313.70630+ds-2
- 2024.20240313.70630+ds-3
- 2024.20240313.70630+ds-4
- 2024.20240313.70630+ds-5
- 2024.20240313.70630+ds-6
- 2025.20250727.75242+ds-1
- 2025.20250727.75242+ds-2
- 2025.20250727.75242+ds-3
- 2025.20250727.75242+ds-4
- 2025.20250727.75242+ds-5
- 2025.20250727.75242+ds-5~hurd.1
- 2026.20260303.78225+ds-1
- 2026.20260303.78225+ds-2
- 2026.20260303.78225+ds-3
- 2026.20260303.78225+ds-4
- 2026.20260303.78225+ds-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Debian:13
- Versions
- 2024.20240313.70630+ds-6
- 2025.20250727.75242+ds-1
- 2025.20250727.75242+ds-2
- 2025.20250727.75242+ds-3
- 2025.20250727.75242+ds-4
- 2025.20250727.75242+ds-5
- 2025.20250727.75242+ds-5~hurd.1
- 2026.20260303.78225+ds-1
- 2026.20260303.78225+ds-2
- 2026.20260303.78225+ds-3
- 2026.20260303.78225+ds-4
- 2026.20260303.78225+ds-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Debian:14
- Versions
- 2024.20240313.70630+ds-6
- 2025.20250727.75242+ds-1
- 2025.20250727.75242+ds-2
- 2025.20250727.75242+ds-3
- 2025.20250727.75242+ds-4
- 2025.20250727.75242+ds-5
- 2025.20250727.75242+ds-5~hurd.1
- 2026.20260303.78225+ds-1
- 2026.20260303.78225+ds-2
- 2026.20260303.78225+ds-3
- 2026.20260303.78225+ds-4
- 2026.20260303.78225+ds-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-base Ubuntu:16.04:LTS
- Versions
- 2015.20150625-1ubuntu1
- 2015.20151116-1ubuntu1
- 2015.20151225-1
- 2015.20160117-1
- 2015.20160215-1
- 2015.20160223-1
- 2015.20160320-1
- 2015.20160320-1ubuntu0.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Ubuntu:Pro:16.04:LTS
- Versions
- 2015.20150524.37493-5build1
- 2015.20150524.37493-7
- 2015.20150524.37493-7build1
- 2015.20150524.37493-7build4
- 2015.20160222.37495-1
- 2015.20160222.37495-1ubuntu0.1
- 2015.20160222.37495-1ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
context Ubuntu:16.04:LTS
- Versions
- 2015.05.18.20150601-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-base Ubuntu:18.04:LTS
- Versions
- 2017.20170818-1
- 2017.20171031-1
- 2017.20171128-1
- 2017.20180110-1
- 2017.20180225-1
- 2017.20180305-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Ubuntu:Pro:18.04:LTS
- Versions
- 2017.20170613.44572-5build1
- 2017.20170613.44572-5build2
- 2017.20170613.44572-6
- 2017.20170613.44572-6build1
- 2017.20170613.44572-6ubuntu1
- 2017.20170613.44572-8build1
- 2017.20170613.44572-8ubuntu0.1
- 2017.20170613.44572-8ubuntu0.2
- 2017.20170613.44572-8ubuntu0.2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
context Ubuntu:18.04:LTS
- Versions
- 2017.05.15.20170613-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Ubuntu:Pro:20.04:LTS
- Versions
- 2019.20190605.51237-2build1
- 2019.20190605.51237-3
- 2019.20190605.51237-3build1
- 2019.20190605.51237-3build2
- 2019.20190605.51237-3ubuntu0.1
- 2019.20190605.51237-3ubuntu0.2
- 2019.20190605.51237-3ubuntu0.2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
context Ubuntu:20.04:LTS
- Versions
- 2019.03.21.20190425-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-base Ubuntu:20.04:LTS
- Versions
- 2019.20190710-1
- 2019.20191112-1
- 2019.20191208-4
- 2019.20191208-4ubuntu2
- 2019.20200218-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
context Ubuntu:22.04:LTS
- Versions
- 2020.03.10.20200331-1
- 2021.03.05.20220211-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-base Ubuntu:22.04:LTS
- Versions
- 2020.20210202-3
- 2021.20211127-1
- 2021.20211217-1
- 2021.20220204-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Ubuntu:22.04:LTS
- Versions
- 2020.20200327.54578-7
- 2020.20200327.54578-7build1
- 2021.20210626.59705-1
- 2021.20210626.59705-1build1
- 2021.20210626.59705-1ubuntu0.1
- 2021.20210626.59705-1ubuntu0.2
- 2021.20210626.59705-1ubuntu0.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
context Ubuntu:24.04:LTS
- Versions
- 2021.03.05.20230120+dfsg-2
- 2023.05.05.20230730+dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-base Ubuntu:24.04:LTS
- Versions
- 2023.20230613-3
- 2023.20231007-1
- 2023.20231207-1
- 2023.20240207-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published