CVE-2016-10243 TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
CriticalCVSS 9.8
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/texlive-base(Debian:12) | < 2016.20161130-1 | 2016.20161130-1 |
| debian/texlive-base(Debian:13) | < 2016.20161130-1 | 2016.20161130-1 |
| debian/texlive-base(Debian:14) | < 2016.20161130-1 | 2016.20161130-1 |
| debian/texlive-bin(Debian:12) | < 2019.20190605.51237-2 | 2019.20190605.51237-2 |
| debian/texlive-bin(Debian:13) | < 2019.20190605.51237-2 | 2019.20190605.51237-2 |
| debian/texlive-bin(Debian:14) | < 2019.20190605.51237-2 | 2019.20190605.51237-2 |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| fedoraproject fedora | = 25 | No fix listed |
| fedoraproject fedora | = 26 | No fix listed |
| tug tex live | All versions | No fix listed |
References
- Debian Security Tracker CVE-2016-10243 vendor-advisory
- DSA-3803 third-party-advisory vendor-advisory
- [oss-security] 20170305 TeX Live: CVE-2016-10243: whitelists a insecure binary/utility to be run as external program mailing-list third-party-advisory
- 96593 third-party-advisory vdb-entry
- FEDORA-2017-b72cafa5b4 vendor-advisory
- FEDORA-2017-a8add6c46c vendor-advisory
- scumjr.github.io exploit technical-description third-party-advisory
- GLSA-201709-07 vendor-advisory
- www.tug.org patch vendor-advisory