CVE-2017-17532 examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argu...
HighCVSS 8.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
examples/framework/news/news3.py in Kiwi 1.9.22 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/kiwi(Debian:12) | All versions | No fix listed |
| debian/kiwi(Debian:12) | = 10.1.18-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.1.20-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.10-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.12-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.13-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.16-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.22-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.24-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.26-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.27-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.28-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.31-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.32-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.33-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.36-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.38-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.41-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.42-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.43-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.45-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.2.9-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.3.0-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.3.10-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.3.4-1 | No fix listed |
Show 101 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/kiwi(Debian:12) | = 10.3.5-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.3.7-1 | No fix listed |
| debian/kiwi(Debian:12) | = 10.3.9-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.24.56-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.11-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.12-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.13-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.14-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.17-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.18-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.19-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.20-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.21-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.22-1 | No fix listed |
| debian/kiwi(Debian:12) | = 9.25.5-1 | No fix listed |
| debian/kiwi(Debian:14) | All versions | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.13-1 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.13-2 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.13-3 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.13-4 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.15-1 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.16-1 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.19-1 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.19-2 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.21-1 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.22-1 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.22-2 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.22-3 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.22-4 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.22-4.1 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.22-4.2 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.8-1 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.8-2 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.8-3 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.8-4 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.8-5 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.8-6 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.8-7 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.9-1 | No fix listed |
| debian/kiwi(Debian:14) | = 1.9.9-2 | No fix listed |
| debian/kiwi(Debian:14) | = 10.1.18-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.1.20-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.10-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.12-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.13-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.16-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.22-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.24-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.26-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.27-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.28-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.31-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.32-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.33-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.36-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.38-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.41-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.42-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.43-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.45-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.2.9-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.3.0-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.3.10-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.3.4-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.3.5-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.3.7-1 | No fix listed |
| debian/kiwi(Debian:14) | = 10.3.9-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.12-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.19-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.20-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.27-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.29-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.30-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.31-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.32-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.35-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.36-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.39-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.43-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.44-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.45-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.48-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.49-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.51-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.54-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.24.56-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.11-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.12-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.13-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.14-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.17-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.18-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.19-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.20-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.21-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.22-1 | No fix listed |
| debian/kiwi(Debian:14) | = 9.25.5-1 | No fix listed |
| kiwi project kiwi | = 1.9.22 | No fix listed |
| ubuntu/kiwi(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/kiwi(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/kiwi(Ubuntu:26.10) | All versions | No fix listed |
References
- Debian Security Tracker CVE-2017-17532 issue-tracking third-party-advisory vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org