UBUNTU-CVE-2017-17515

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2017-17515
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-17515.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2017-17515
Withdrawn
2025-06-23T15:53:03Z
Published
2017-12-14T16:29:00Z
Modified
2017-12-14T16:29:00Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

** DISPUTED ** etc/ObjectList in Metview 4.7.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a third party has indicated that the code to access this environment variable is not enabled in the shipped product.

References

Affected packages

Ubuntu:Pro:16.04:LTS / metview

Package

Name
metview
Purl
pkg:deb/ubuntu/metview

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.5.6-6build1
4.5.7-3
4.6.1-4
4.6.1-4build1
4.6.1-5
4.6.1-5build1

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-17515.json"

Ubuntu:Pro:18.04:LTS / metview

Package

Name
metview
Purl
pkg:deb/ubuntu/metview

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.8.7-1build1
4.8.7-1build2
4.9.1-1
4.9.1-2
5.*
5.0.0~beta.1-1
5.0.0~beta.1-1build1

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-17515.json"

Ubuntu:20.04:LTS / metview

Package

Name
metview
Purl
pkg:deb/ubuntu/metview

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.6.1-5
5.7.0-1ubuntu3
5.7.3-1
5.7.4-1
5.7.5-1

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-17515.json"

Ubuntu:22.04:LTS / metview

Package

Name
metview
Purl
pkg:deb/ubuntu/metview

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1
5.14.0-1
5.14.1-1

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-17515.json"

Ubuntu:24.04:LTS / metview

Package

Name
metview
Purl
pkg:deb/ubuntu/metview

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.2-1
5.20.0-2
5.21.1-1
5.21.2-1build1
5.21.2-1build2
5.21.2-1build3

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-17515.json"