DEBIAN-CVE-2017-17513

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2017-17513
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2017-17513
Upstream
Published
2017-12-14T16:29:00Z
Modified
2026-09-01T20:03:46Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linked_scripts/context/stubs/unix/mtxrun, texmf-dist/scripts/context/stubs/mswin/mtxrun.lua, and texmf-dist/tex/luatex/lualibs/lualibs-os.lua.

References

Affected packages

Debian:12
context

Package

Name
context
Purl
pkg:deb/debian/context?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2021.*
2021.03.05.20230120+dfsg-1
2021.03.05.20230120+dfsg-1+deb12u1
2021.03.05.20230120+dfsg-2
2023.*
2023.05.05.20230730+dfsg-1
2023.05.05.20230730+dfsg-2
2024.*
2024.04.01.20240428+dfsg-1
2024.04.01.20240428+dfsg-2
2025.*
2025.03.05.20250324+dfsg-1
2025.03.05.20250324+dfsg-2
2025.03.05.20250324+dfsg-3
2025.09.21.20251026+dfsg-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json"
texlive-base

Package

Name
texlive-base
Purl
pkg:deb/debian/texlive-base?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2022.*
2022.20230122-3
2023.*
2023.20230613-1
2023.20230613-2
2023.20230613-3
2023.20231007-1
2023.20231207-1
2023.20240207-1
2024.*
2024.20240401-1
2024.20240401-2
2024.20240401-3
2024.20240706-1
2024.20240829-1
2024.20240829-2
2024.20241102-1
2024.20241115-1
2024.20250114-1
2024.20250309-1
2025.*
2025.20250727-1
2025.20250727-2
2025.20250727-3
2025.20250927-1
2025.20250927-2
2025.20250927-3
2025.20250927-4
2025.20251127-1
2025.20260124-1
2026.*
2026.20260328-1
2026.20260328-2
2026.20260328-3
2026.20260328-4
2026.20260527-1
2026.20260527-2
2026.20260527-3
2026.20260711-1
2026.20260711-2

Ecosystem specific 

{
    "urgency": "unimportant"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json"
texlive-bin

Package

Name
texlive-bin
Purl
pkg:deb/debian/texlive-bin?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2022.*
2022.20220321.62855-5.1
2022.20220321.62855-5.1+deb12u1
2022.20220321.62855-5.1+deb12u2
2022.20220321.62855-6
2022.20220321.62855-7
2022.20220321.62855-8
2023.*
2023.20230311.66589-1
2023.20230311.66589-2
2023.20230311.66589-3
2023.20230311.66589-4
2023.20230311.66589-5
2023.20230311.66589-6
2023.20230311.66589-7
2023.20230311.66589-8
2023.20230311.66589-9
2024.*
2024.20240313.70630+ds-1
2024.20240313.70630+ds-2
2024.20240313.70630+ds-3
2024.20240313.70630+ds-4
2024.20240313.70630+ds-5
2024.20240313.70630+ds-6
2025.*
2025.20250727.75242+ds-1
2025.20250727.75242+ds-2
2025.20250727.75242+ds-3
2025.20250727.75242+ds-4
2025.20250727.75242+ds-5~hurd.1
2025.20250727.75242+ds-5
2026.*
2026.20260303.78225+ds-1
2026.20260303.78225+ds-2
2026.20260303.78225+ds-3
2026.20260303.78225+ds-4
2026.20260303.78225+ds-5

Ecosystem specific 

{
    "urgency": "unimportant"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json"
Debian:13
context

Package

Name
context
Purl
pkg:deb/debian/context?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2024.*
2024.04.01.20240428+dfsg-2
2025.*
2025.03.05.20250324+dfsg-1
2025.03.05.20250324+dfsg-2
2025.03.05.20250324+dfsg-3
2025.09.21.20251026+dfsg-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json"
texlive-base

Package

Name
texlive-base
Purl
pkg:deb/debian/texlive-base?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2024.*
2024.20250309-1
2025.*
2025.20250727-1
2025.20250727-2
2025.20250727-3
2025.20250927-1
2025.20250927-2
2025.20250927-3
2025.20250927-4
2025.20251127-1
2025.20260124-1
2026.*
2026.20260328-1
2026.20260328-2
2026.20260328-3
2026.20260328-4
2026.20260527-1
2026.20260527-2
2026.20260527-3
2026.20260711-1
2026.20260711-2

Ecosystem specific 

{
    "urgency": "unimportant"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json"
texlive-bin

Package

Name
texlive-bin
Purl
pkg:deb/debian/texlive-bin?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2024.*
2024.20240313.70630+ds-6
2025.*
2025.20250727.75242+ds-1
2025.20250727.75242+ds-2
2025.20250727.75242+ds-3
2025.20250727.75242+ds-4
2025.20250727.75242+ds-5~hurd.1
2025.20250727.75242+ds-5
2026.*
2026.20260303.78225+ds-1
2026.20260303.78225+ds-2
2026.20260303.78225+ds-3
2026.20260303.78225+ds-4
2026.20260303.78225+ds-5

Ecosystem specific 

{
    "urgency": "unimportant"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json"
Debian:14
context

Package

Name
context
Purl
pkg:deb/debian/context?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2024.*
2024.04.01.20240428+dfsg-2
2025.*
2025.03.05.20250324+dfsg-1
2025.03.05.20250324+dfsg-2
2025.03.05.20250324+dfsg-3
2025.09.21.20251026+dfsg-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json"
texlive-base

Package

Name
texlive-base
Purl
pkg:deb/debian/texlive-base?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2024.*
2024.20250309-1
2025.*
2025.20250727-1
2025.20250727-2
2025.20250727-3
2025.20250927-1
2025.20250927-2
2025.20250927-3
2025.20250927-4
2025.20251127-1
2025.20260124-1
2026.*
2026.20260328-1
2026.20260328-2
2026.20260328-3
2026.20260328-4
2026.20260527-1
2026.20260527-2
2026.20260527-3
2026.20260711-1
2026.20260711-2

Ecosystem specific 

{
    "urgency": "unimportant"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json"
texlive-bin

Package

Name
texlive-bin
Purl
pkg:deb/debian/texlive-bin?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2024.*
2024.20240313.70630+ds-6
2025.*
2025.20250727.75242+ds-1
2025.20250727.75242+ds-2
2025.20250727.75242+ds-3
2025.20250727.75242+ds-4
2025.20250727.75242+ds-5~hurd.1
2025.20250727.75242+ds-5
2026.*
2026.20260303.78225+ds-1
2026.20260303.78225+ds-2
2026.20260303.78225+ds-3
2026.20260303.78225+ds-4
2026.20260303.78225+ds-5

Ecosystem specific 

{
    "urgency": "unimportant"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2017-17513.json"