CVE catalog

CVE-2017-17511

kildclient: CVE-2017-17511

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.69% · Oct 25, 2026

KildClient 3.1.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to prefs.c and worldgui.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiankildclientsid3.2.3-1fixed
Debiankildclientforky3.2.3-1fixed
Debiankildclienttrixie3.2.3-1fixed
Debiankildclientbookworm3.2.0-2fixed
Ubuntukildclient14.042.11.1-1build1vulnerable
Ubuntukildclient14.042.11.1-1build2vulnerable
Ubuntukildclient14.042.11.1-1+deb7u2build0.14.04.1fixed
Ubuntukildclient16.043.0.0-2vulnerable
Ubuntukildclient16.043.0.0-2build1vulnerable
Ubuntukildclient16.043.0.0-2build2vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiankildclientsourcesid3.2.0-1not yet assignedNot reported[885007]
Debiankildclientsourceforky3.2.0-1not yet assignedNot reported[885007]
Debiankildclientsourcetrixie3.2.0-1not yet assignedNot reported[885007]
Debiankildclientsourcebookworm3.2.0-1not yet assignedNot reported[885007]
Ubuntukildclientdeb14.042.11.1-1+deb7u2build0.14.04.1Not reportedUBUNTU-CVE-2017-17511Not reported

[Debian bug #885007]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [kildclient]Fixed

    Source package: [kildclient]

    Details (2)

    • 3.2.0-2+b5 · amd64 · bookworm

      Fixed · Fixed: 3.2.0-1

      dsa · kildclient · debian · bookworm; dsa · kildclient · debian · 12

    • 3.2.0-2+b5 · arm64 · bookworm

      Fixed · Fixed: 3.2.0-1

      dsa · kildclient · debian · bookworm; dsa · kildclient · debian · 12

  • [kildclient-doc]Fixed

    Source package: [kildclient]

    Details (2)

    • 3.2.0-2 · all · bookworm

      Fixed · Fixed: 3.2.0-1

      dsa · kildclient · debian · bookworm; dsa · kildclient · debian · 12

    • 3.2.0-2 · all · bookworm

      Fixed · Fixed: 3.2.0-1

      dsa · kildclient · debian · bookworm; dsa · kildclient · debian · 12

[Debian 13 (Trixie)]

  • [kildclient]Fixed
    Details (2)

    • 3.2.3-1 · amd64 · trixie

      Fixed · Fixed: 3.2.0-1

      dsa · kildclient · debian · 13

    • 3.2.3-1 · arm64 · trixie

      Fixed · Fixed: 3.2.0-1

      dsa · kildclient · debian · 13

  • [kildclient-doc]Fixed

    Source package: [kildclient]

    Details (2)

    • 3.2.3-1 · all · trixie

      Fixed · Fixed: 3.2.0-1

      dsa · kildclient · debian · 13

    • 3.2.3-1 · all · trixie

      Fixed · Fixed: 3.2.0-1

      dsa · kildclient · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]