Vulnerability · Published Dec 20, 2022 · Assigned by redhat
CVE-2022-4515
High 7.8
In plain English
A high-severity OS command injection in Exuberant Ctags. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ctags | 5.8-23.el8 | ALSA-2023:2863 |
| AlmaLinux:8 | ctags-etags | 5.8-23.el8 | ALSA-2023:2863 |
| Debian:12 | exuberant-ctags | 1:5.9~svn20110310-18 | DEBIAN-CVE-2022-4515 |
| Debian:13 | exuberant-ctags | 1:5.9~svn20110310-18 | DEBIAN-CVE-2022-4515 |
| Debian:14 | exuberant-ctags | 1:5.9~svn20110310-18 | DEBIAN-CVE-2022-4515 |
| Rocky Linux:8 | ctags | 0:5.8-23.el8 | RLSA-2023:2863 |
| Ubuntu:22.04:LTS | exuberant-ctags | 1:5.9~svn20110310-16ubuntu0.22.04.1 | USN-5820-1 |
| Ubuntu:22.04:LTS | exuberant-ctags | 1:5.9~svn20110310-16ubuntu0.22.04.1 | UBUNTU-CVE-2022-4515 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Exuberant Ctags | All versions are affected |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H