CVE catalog

CVE-2022-4515

exuberant-ctags: CVE-2022-4515

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.61% · Oct 25, 2026

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianexuberant-ctagssid1:5.9~svn20110310-20fixed
Debianexuberant-ctagsforky1:5.9~svn20110310-20fixed
Debianexuberant-ctagstrixie1:5.9~svn20110310-19fixed
Debianexuberant-ctagsbookworm1:5.9~svn20110310-18fixed
Debianuniversal-ctagssid6.2.1-1not affected
Debianuniversal-ctagsforky6.2.1-1not affected
Debianuniversal-ctagstrixie5.9.20210829.0-2not affected
Debianuniversal-ctagsbookworm5.9.20210829.0-1not affected
Ubuntuexuberant-ctagspro1:5.9~svn20110310-9vulnerable
Ubuntuexuberant-ctagspro1:5.9~svn20110310-10vulnerable
Ubuntuexuberant-ctagspro1:5.9~svn20110310-11vulnerable
Ubuntuexuberant-ctagspro1:5.9~svn20110310-11ubuntu0.1~esm1fixed
Ubuntuexuberant-ctags18.041:5.9~svn20110310-11vulnerable
Ubuntuexuberant-ctags18.041:5.9~svn20110310-11ubuntu0.1fixed
Ubuntuexuberant-ctags20.041:5.9~svn20110310-12vulnerable
Ubuntuexuberant-ctags20.041:5.9~svn20110310-12ubuntu0.1fixed
Ubuntuexuberant-ctags22.041:5.9~svn20110310-15vulnerable
Ubuntuexuberant-ctags22.041:5.9~svn20110310-16vulnerable
Ubuntuexuberant-ctags22.041:5.9~svn20110310-16build1vulnerable
Ubuntuexuberant-ctags22.041:5.9~svn20110310-16ubuntu0.22.04.1fixed
Susectagsopenstack cloud 95.8-8.3.1fixed
Susectagsopenstack cloud crowbar 95.8-8.3.1fixed
Susectagslinux enterprise server for sap applications 12 sp45.8-8.3.1fixed
Susectagslinux enterprise server 12 sp2-bcl5.8-8.3.1fixed
Susectagslinux enterprise server 12 sp4-ltss5.8-8.3.1fixed
Susectagslinux enterprise server 12 sp55.8-8.3.1fixed
Susectagslinux enterprise server for sap applications 12 sp55.8-8.3.1fixed
Susectagslinux enterprise module for development tools 15 sp45.8-150000.3.3.1fixed
Susectagslinux enterprise high performance computing 15 sp1-ltss5.8-150000.3.3.1fixed
Susectagslinux enterprise high performance computing 15 sp2-ltss5.8-150000.3.3.1fixed
Susectagslinux enterprise high performance computing 15 sp3-espos5.8-150000.3.3.1fixed
Susectagslinux enterprise high performance computing 15 sp3-ltss5.8-150000.3.3.1fixed
Susectagslinux enterprise real time 15 sp35.8-150000.3.3.1fixed
Susectagslinux enterprise server 15 sp1-ltss5.8-150000.3.3.1fixed
Susectagslinux enterprise server 15 sp2-ltss5.8-150000.3.3.1fixed
Susectagslinux enterprise server 15 sp3-ltss5.8-150000.3.3.1fixed
Susectagslinux enterprise server for sap applications 15 sp15.8-150000.3.3.1fixed
Susectagslinux enterprise server for sap applications 15 sp25.8-150000.3.3.1fixed
Susectagslinux enterprise server for sap applications 15 sp35.8-150000.3.3.1fixed
Susectagsenterprise storage 65.8-150000.3.3.1fixed
Susectagsenterprise storage 75.8-150000.3.3.1fixed
Susectagsenterprise storage 7.15.8-150000.3.3.1fixed
Opensusectagsleap 15.45.8-150000.3.3.1fixed
Ubuntuexuberant-ctagspro1:5.9~svn20110310-9vulnerable
Ubuntuexuberant-ctagspro1:5.9~svn20110310-10vulnerable
Ubuntuexuberant-ctagspro1:5.9~svn20110310-11vulnerable
Ubuntuexuberant-ctagspro1:5.9~svn20110310-11ubuntu0.1~esm1fixed
Ubuntuexuberant-ctags18.041:5.9~svn20110310-11vulnerable
Ubuntuexuberant-ctags18.041:5.9~svn20110310-11ubuntu0.1fixed
Ubuntuexuberant-ctags20.041:5.9~svn20110310-12vulnerable
Ubuntuexuberant-ctags20.041:5.9~svn20110310-12ubuntu0.1fixed
Ubuntuexuberant-ctags22.041:5.9~svn20110310-15vulnerable
Ubuntuexuberant-ctags22.041:5.9~svn20110310-16vulnerable
Ubuntuexuberant-ctags22.041:5.9~svn20110310-16build1vulnerable
Ubuntuexuberant-ctags22.041:5.9~svn20110310-16ubuntu0.22.04.1fixed
Opensusectagstumbleweed5.8-12.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianexuberant-ctagssourcesid1:5.9~svn20110310-18not yet assignedNot reported[1026995]
Debianexuberant-ctagssourceforky1:5.9~svn20110310-18not yet assignedNot reported[1026995]
Debianexuberant-ctagssourcetrixie1:5.9~svn20110310-18not yet assignedNot reported[1026995]
Debianexuberant-ctagssourcebookworm1:5.9~svn20110310-18not yet assignedNot reported[1026995]
Debianuniversal-ctagssourcesidNot affectedunimportantNot reportedNot reported
Debianuniversal-ctagssourceforkyNot affectedunimportantNot reportedNot reported
Debianuniversal-ctagssourcetrixieNot affectedunimportantNot reportedNot reported
Debianuniversal-ctagssourcebookwormNot affectedunimportantNot reportedNot reported
Ubuntuexuberant-ctagsdebpro1:5.9~svn20110310-11ubuntu0.1~esm1Not reportedUSN-5820-1Not reported
Ubuntuexuberant-ctagsdeb18.041:5.9~svn20110310-11ubuntu0.1Not reportedUSN-5820-1Not reported
Ubuntuexuberant-ctagsdeb20.041:5.9~svn20110310-12ubuntu0.1Not reportedUSN-5820-1Not reported
Ubuntuexuberant-ctagsdeb22.041:5.9~svn20110310-16ubuntu0.22.04.1Not reportedUSN-5820-1Not reported
Susectagsrpmopenstack cloud 95.8-8.3.1Not reportedSUSE-SU-2023:0224-1Not reported
Susectagsrpmopenstack cloud crowbar 95.8-8.3.1Not reportedSUSE-SU-2023:0224-1Not reported
Susectagsrpmlinux enterprise server for sap applications 12 sp45.8-8.3.1Not reportedSUSE-SU-2023:0224-1Not reported
Susectagsrpmlinux enterprise server 12 sp2-bcl5.8-8.3.1Not reportedSUSE-SU-2023:0224-1Not reported
Susectagsrpmlinux enterprise server 12 sp4-ltss5.8-8.3.1Not reportedSUSE-SU-2023:0224-1Not reported
Susectagsrpmlinux enterprise server 12 sp55.8-8.3.1Not reportedSUSE-SU-2023:0224-1Not reported
Susectagsrpmlinux enterprise server for sap applications 12 sp55.8-8.3.1Not reportedSUSE-SU-2023:0224-1Not reported
Susectagsrpmlinux enterprise module for development tools 15 sp45.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise high performance computing 15 sp1-ltss5.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise high performance computing 15 sp2-ltss5.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise high performance computing 15 sp3-espos5.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise high performance computing 15 sp3-ltss5.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise real time 15 sp35.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise server 15 sp1-ltss5.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise server 15 sp2-ltss5.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise server 15 sp3-ltss5.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise server for sap applications 15 sp15.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise server for sap applications 15 sp25.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmlinux enterprise server for sap applications 15 sp35.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmenterprise storage 65.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmenterprise storage 75.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Susectagsrpmenterprise storage 7.15.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Opensusectagsrpmleap 15.45.8-150000.3.3.1Not reportedSUSE-SU-2023:0225-1Not reported
Ubuntuexuberant-ctagsdebpro1:5.9~svn20110310-11ubuntu0.1~esm1Not reportedUBUNTU-CVE-2022-4515Not reported
Ubuntuexuberant-ctagsdeb18.041:5.9~svn20110310-11ubuntu0.1Not reportedUBUNTU-CVE-2022-4515Not reported
Ubuntuexuberant-ctagsdeb20.041:5.9~svn20110310-12ubuntu0.1Not reportedUBUNTU-CVE-2022-4515Not reported
Ubuntuexuberant-ctagsdeb22.041:5.9~svn20110310-16ubuntu0.22.04.1Not reportedUBUNTU-CVE-2022-4515Not reported
Opensusectagsrpmtumbleweed5.8-12.1Not reportedOPENSUSE-SU-2024:12624-1Not reported

[Debian bug #1026995]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [exuberant-ctags]Fixed
    Details (2)

    • 1:5.9~svn20110310-18 · amd64 · bookworm

      Fixed · Fixed: 1:5.9~svn20110310-18

      dsa · exuberant-ctags · debian · bookworm

    • 1:5.9~svn20110310-18 · arm64 · bookworm

      Fixed · Fixed: 1:5.9~svn20110310-18

      dsa · exuberant-ctags · debian · bookworm

  • [universal-ctags]Not affected
    Details (2)

    • 5.9.20210829.0-1 · amd64 · bookworm

      Not affected

      dsa · universal-ctags · debian · bookworm

    • 5.9.20210829.0-1 · arm64 · bookworm

      Not affected

      dsa · universal-ctags · debian · bookworm

[openSUSE Tumbleweed]

  • [ctags]Fixed

    Source package: [ctags]

    Details (1)

    • 5.8-15.5 · x86_64 · tumbleweed

      Fixed · Fixed: 5.8-12.1

      dsa · ctags · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]