The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by %s in this environment variable.

According to the version of the xdg-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The open_envvar function in xdg-open in xdg-utils     before 1.1.3 does not validate strings before launching     the program specified by the BROWSER environment     variable, which might allow remote attackers to conduct     argument-injection attacks via a crafted URL, as     demonstrated by %s in this environment     variable.(CVE-2017-18266)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xdg-utils fixes this security issues :

  - CVE-2017-18266: The open_envvar function in xdg-open did     not validate strings launching the program specified by     the BROWSER environment variable, which might allowed     remote attackers to conduct argument-injection attacks     via a crafted URL (bsc#1093086).

New upstream bugfix release, includes security fix for CVE-2017-18266

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Gabriel Corona discovered that xdg-utils, a set of tools for desktop environment integration, is vulnerable to argument injection attacks.
If the environment variable BROWSER in the victim host has a '%s' and the victim opens a link crafted by an attacker with xdg-open, the malicious party could manipulate the parameters used by the browser when opened. This manipulation could set, for example, a proxy to which the network traffic could be intercepted for that particular execution.

It was found that the open_envvar function in xdg-utils does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.

For Debian 7 'Wheezy', these problems have been fixed in version 1.1.0~rc1+git20111210-6+deb7u4.

We recommend that you upgrade your xdg-utils packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that xdg-utils incorrectly handled certain inputs.
An attacker could possibly use this to execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
149172	EulerOS 2.0 SP3 : xdg-utils (EulerOS-SA-2021-1861)	Nessus	Huawei Local Security Checks	high
123182	openSUSE Security Update : xdg-utils (openSUSE-2019-420)	Nessus	SuSE Local Security Checks	high
120890	Fedora 28 : xdg-utils (2018-efd98d9a58)	Nessus	Fedora Local Security Checks	high
110409	openSUSE Security Update : xdg-utils (openSUSE-2018-573)	Nessus	SuSE Local Security Checks	high
110172	Fedora 26 : xdg-utils (2018-c8f559e8c2)	Nessus	Fedora Local Security Checks	high
110165	Debian DSA-4211-1 : xdg-utils - security update	Nessus	Debian Local Security Checks	high
110160	Debian DLA-1384-1 : xdg-utils security update	Nessus	Debian Local Security Checks	high
110044	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : xdg-utils vulnerability (USN-3650-1)	Nessus	Ubuntu Local Security Checks	high
109903	Fedora 27 : xdg-utils (2018-b753813bf0)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-18266

high

Tenable Plugins

high

high

high

high

high

high

high

high

high