Catalogo CVE
CVE-2016-10243
texlive-base: CVE-2016-10243
- Gravità
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 7.15% · Oct 22, 2026
TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | texlive-bin | sid | 2026.20260303.78225+ds-5 | fixed |
| Debian | texlive-bin | forky | 2026.20260303.78225+ds-5 | fixed |
| Debian | texlive-bin | trixie | 2024.20240313.70630+ds-6 | fixed |
| Debian | texlive-bin | bookworm | 2022.20220321.62855-5.1+deb12u2 | fixed |
| Debian | texlive-base | sid | 2026.20260911-1 | fixed |
| Debian | texlive-base | forky | 2026.20260911-1 | fixed |
| Debian | texlive-base | trixie | 2024.20250309-1 | fixed |
| Debian | texlive-base | bookworm | 2022.20230122-3 | fixed |
| Ubuntu | texlive-base | 14.04 | 2013.20130722-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20131010-2 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20131112-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20131219-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20140123-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20140215-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20140215-1ubuntu0.1 | fixed |
| Ubuntu | texlive-base | 16.04 | 2015.20150625-1ubuntu1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20151116-1ubuntu1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20151225-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160117-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160215-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160223-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160320-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160320-1ubuntu0.1 | fixed |
| Opensuse | texlive-specs-g | tumbleweed | 2021.186.1.0svn54080-45.2 | fixed |
| Opensuse | texlive-specs-j | tumbleweed | 2021.186.1.6.0svn54732-45.2 | fixed |
| Opensuse | texlive-specs-m | tumbleweed | 2021.186.0.0.5.6svn53248-48.2 | fixed |
| Opensuse | texlive-specs-h | tumbleweed | 2021.186.1.0svn18115-46.3 | fixed |
| Opensuse | texlive-specs-i | tumbleweed | 2021.186.2.0bsvn56782-45.2 | fixed |
| Opensuse | texlive-specs-z | tumbleweed | 2021.186.17.7svn55862-45.3 | fixed |
| Opensuse | texlive-specs-s | tumbleweed | 2021.186.0.0.3bsvn15878-45.2 | fixed |
| Opensuse | texlive-specs-v | tumbleweed | 2021.186.0.0.1svn34495-50.3 | fixed |
| Opensuse | texlive-specs-y | tumbleweed | 2021.186.1.1svn48423-46.2 | fixed |
| Opensuse | texlive-specs-f | tumbleweed | 2021.186.1.5.7svn58590-46.2 | fixed |
| Opensuse | texlive-specs-e | tumbleweed | 2021.186.1.5svn55387-46.2 | fixed |
| Opensuse | texlive-specs-l | tumbleweed | 2021.186.1.2.2svn57773-45.2 | fixed |
| Opensuse | texlive-specs-t | tumbleweed | 2021.186.0.0.1svn15878-46.3 | fixed |
| Opensuse | texlive-specs-b | tumbleweed | 2021.186.svn19440-46.2 | fixed |
| Ubuntu | texlive-base | 14.04 | 2013.20130722-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20131010-2 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20131112-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20131219-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20140123-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20140215-1 | vulnerable |
| Ubuntu | texlive-base | 14.04 | 2013.20140215-1ubuntu0.1 | fixed |
| Ubuntu | texlive-base | 16.04 | 2015.20150625-1ubuntu1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20151116-1ubuntu1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20151225-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160117-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160215-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160223-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160320-1 | vulnerable |
| Ubuntu | texlive-base | 16.04 | 2015.20160320-1ubuntu0.1 | fixed |
| Opensuse | texlive-specs-q | tumbleweed | 2021.186.0.0.1svn45601-47.3 | fixed |
| Opensuse | texlive-specs-w | tumbleweed | 2021.186.1.2svn54512-46.2 | fixed |
| Opensuse | texlive-specs-p | tumbleweed | 2021.186.1.01svn41996-46.2 | fixed |
| Opensuse | texlive-specs-o | tumbleweed | 2021.186.1.5svn15878-45.2 | fixed |
| Opensuse | texlive-specs-d | tumbleweed | 2021.186.2.1bsvn15878-45.2 | fixed |
| Opensuse | texlive-specs-n | tumbleweed | 2021.187.svn55643-47.2 | fixed |
| Opensuse | texlive-specs-x | tumbleweed | 2021.186.1.3svn40772-45.2 | fixed |
| Opensuse | texlive-specs-u | tumbleweed | 2021.186.1.2asvn15878-46.2 | fixed |
| Opensuse | texlive-specs-r | tumbleweed | 2021.186.0.0.3.1svn55214-44.2 | fixed |
| Opensuse | texlive-specs-k | tumbleweed | 2021.186.1.0fsvn22255-46.3 | fixed |
| Opensuse | texlive-specs-c | tumbleweed | 2021.186.svn15878-46.2 | fixed |
| Opensuse | texlive-specs-a | tumbleweed | 2021.186.3.0_beta3svn33894-47.2 | fixed |
| Opensuse | texlive | tumbleweed | 2021.20210325.svn34398-76.3 | fixed |
| Suse | texlive-kastrup | linux enterprise software development kit 12 sp5 | 2013.84.svn15878-21.3.1 | fixed |
| Suse | texlive-koma-script | linux enterprise software development kit 12 sp5 | 2013.84.3.11bsvn29774-21.3.1 | fixed |
| Suse | texlive-kpathsea | linux enterprise software development kit 12 sp5 | 2013.84.svn30218-21.3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | texlive-bin | source | sid | 2019.20190605.51237-2 | unimportant | Not reported | Not reported |
| Debian | texlive-bin | source | forky | 2019.20190605.51237-2 | unimportant | Not reported | Not reported |
| Debian | texlive-bin | source | trixie | 2019.20190605.51237-2 | unimportant | Not reported | Not reported |
| Debian | texlive-bin | source | bookworm | 2019.20190605.51237-2 | unimportant | Not reported | Not reported |
| Debian | texlive-base | source | sid | 2016.20161130-1 | not yet assigned | Not reported | Not reported |
| Debian | texlive-base | source | forky | 2016.20161130-1 | not yet assigned | Not reported | Not reported |
| Debian | texlive-base | source | trixie | 2016.20161130-1 | not yet assigned | Not reported | Not reported |
| Debian | texlive-base | source | bookworm | 2016.20161130-1 | not yet assigned | Not reported | Not reported |
| Ubuntu | texlive-base | deb | 14.04 | 2013.20140215-1ubuntu0.1 | Not reported | USN-3401-1 | Not reported |
| Ubuntu | texlive-base | deb | 16.04 | 2015.20160320-1ubuntu0.1 | Not reported | USN-3401-1 | Not reported |
| Opensuse | texlive-specs-g | rpm | tumbleweed | 2021.186.1.0svn54080-45.2 | Not reported | OPENSUSE-SU-2024:11439-1 | Not reported |
| Opensuse | texlive-specs-j | rpm | tumbleweed | 2021.186.1.6.0svn54732-45.2 | Not reported | OPENSUSE-SU-2024:11442-1 | Not reported |
| Opensuse | texlive-specs-m | rpm | tumbleweed | 2021.186.0.0.5.6svn53248-48.2 | Not reported | OPENSUSE-SU-2024:11445-1 | Not reported |
| Opensuse | texlive-specs-h | rpm | tumbleweed | 2021.186.1.0svn18115-46.3 | Not reported | OPENSUSE-SU-2024:11440-1 | Not reported |
| Opensuse | texlive-specs-i | rpm | tumbleweed | 2021.186.2.0bsvn56782-45.2 | Not reported | OPENSUSE-SU-2024:11441-1 | Not reported |
| Opensuse | texlive-specs-z | rpm | tumbleweed | 2021.186.17.7svn55862-45.3 | Not reported | OPENSUSE-SU-2024:11458-1 | Not reported |
| Opensuse | texlive-specs-s | rpm | tumbleweed | 2021.186.0.0.3bsvn15878-45.2 | Not reported | OPENSUSE-SU-2024:11451-1 | Not reported |
| Opensuse | texlive-specs-v | rpm | tumbleweed | 2021.186.0.0.1svn34495-50.3 | Not reported | OPENSUSE-SU-2024:11454-1 | Not reported |
| Opensuse | texlive-specs-y | rpm | tumbleweed | 2021.186.1.1svn48423-46.2 | Not reported | OPENSUSE-SU-2024:11457-1 | Not reported |
| Opensuse | texlive-specs-f | rpm | tumbleweed | 2021.186.1.5.7svn58590-46.2 | Not reported | OPENSUSE-SU-2024:11438-1 | Not reported |
| Opensuse | texlive-specs-e | rpm | tumbleweed | 2021.186.1.5svn55387-46.2 | Not reported | OPENSUSE-SU-2024:11437-1 | Not reported |
| Opensuse | texlive-specs-l | rpm | tumbleweed | 2021.186.1.2.2svn57773-45.2 | Not reported | OPENSUSE-SU-2024:11444-1 | Not reported |
| Opensuse | texlive-specs-t | rpm | tumbleweed | 2021.186.0.0.1svn15878-46.3 | Not reported | OPENSUSE-SU-2024:11452-1 | Not reported |
| Opensuse | texlive-specs-b | rpm | tumbleweed | 2021.186.svn19440-46.2 | Not reported | OPENSUSE-SU-2024:11434-1 | Not reported |
| Ubuntu | texlive-base | deb | 14.04 | 2013.20140215-1ubuntu0.1 | Not reported | UBUNTU-CVE-2016-10243 | Not reported |
| Ubuntu | texlive-base | deb | 16.04 | 2015.20160320-1ubuntu0.1 | Not reported | UBUNTU-CVE-2016-10243 | Not reported |
| Opensuse | texlive-specs-q | rpm | tumbleweed | 2021.186.0.0.1svn45601-47.3 | Not reported | OPENSUSE-SU-2024:11449-1 | Not reported |
| Opensuse | texlive-specs-w | rpm | tumbleweed | 2021.186.1.2svn54512-46.2 | Not reported | OPENSUSE-SU-2024:11455-1 | Not reported |
| Opensuse | texlive-specs-p | rpm | tumbleweed | 2021.186.1.01svn41996-46.2 | Not reported | OPENSUSE-SU-2024:11448-1 | Not reported |
| Opensuse | texlive-specs-o | rpm | tumbleweed | 2021.186.1.5svn15878-45.2 | Not reported | OPENSUSE-SU-2024:11447-1 | Not reported |
| Opensuse | texlive-specs-d | rpm | tumbleweed | 2021.186.2.1bsvn15878-45.2 | Not reported | OPENSUSE-SU-2024:11436-1 | Not reported |
| Opensuse | texlive-specs-n | rpm | tumbleweed | 2021.187.svn55643-47.2 | Not reported | OPENSUSE-SU-2024:11446-1 | Not reported |
| Opensuse | texlive-specs-x | rpm | tumbleweed | 2021.186.1.3svn40772-45.2 | Not reported | OPENSUSE-SU-2024:11456-1 | Not reported |
| Opensuse | texlive-specs-u | rpm | tumbleweed | 2021.186.1.2asvn15878-46.2 | Not reported | OPENSUSE-SU-2024:11453-1 | Not reported |
| Opensuse | texlive-specs-r | rpm | tumbleweed | 2021.186.0.0.3.1svn55214-44.2 | Not reported | OPENSUSE-SU-2024:11450-1 | Not reported |
| Opensuse | texlive-specs-k | rpm | tumbleweed | 2021.186.1.0fsvn22255-46.3 | Not reported | OPENSUSE-SU-2024:11443-1 | Not reported |
| Opensuse | texlive-specs-c | rpm | tumbleweed | 2021.186.svn15878-46.2 | Not reported | OPENSUSE-SU-2024:11435-1 | Not reported |
| Opensuse | texlive-specs-a | rpm | tumbleweed | 2021.186.3.0_beta3svn33894-47.2 | Not reported | OPENSUSE-SU-2024:11433-1 | Not reported |
| Opensuse | texlive | rpm | tumbleweed | 2021.20210325.svn34398-76.3 | Not reported | OPENSUSE-SU-2024:11431-1 | Not reported |
| Suse | texlive-kastrup | rpm | linux enterprise software development kit 12 sp5 | 2013.84.svn15878-21.3.1 | Not reported | SUSE-SU-2024:1203-1 | Not reported |
| Suse | texlive-koma-script | rpm | linux enterprise software development kit 12 sp5 | 2013.84.3.11bsvn29774-21.3.1 | Not reported | SUSE-SU-2024:1203-1 | Not reported |
| Suse | texlive-kpathsea | rpm | linux enterprise software development kit 12 sp5 | 2013.84.svn30218-21.3.1 | Not reported | SUSE-SU-2024:1203-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [libkpathsea6]Sconosciuto
Pacchetto sorgente: [texlive]
Dettagli (1)
6.4.2-120.4· x86_64 · tumbleweedSconosciuto · Corretta:
2021.20210325.svn34398-76.3Version impact unknown
dsa · texlive · opensuse · tumbleweed
- [libptexenc1]Sconosciuto
Pacchetto sorgente: [texlive]
Dettagli (1)
1.5.2-120.4· x86_64 · tumbleweedSconosciuto · Corretta:
2021.20210325.svn34398-76.3Version impact unknown
dsa · texlive · opensuse · tumbleweed
- [libsynctex2]Sconosciuto
Pacchetto sorgente: [texlive]
Dettagli (1)
1.21-120.4· x86_64 · tumbleweedSconosciuto · Corretta:
2021.20210325.svn34398-76.3Version impact unknown
dsa · texlive · opensuse · tumbleweed
- [libtexlua53-5]Sconosciuto
Pacchetto sorgente: [texlive]
Dettagli (1)
5.3.6-120.4· x86_64 · tumbleweedSconosciuto · Corretta:
2021.20210325.svn34398-76.3Version impact unknown
dsa · texlive · opensuse · tumbleweed
- [libtexluajit2]Sconosciuto
Pacchetto sorgente: [texlive]
Dettagli (1)
2.1.81742-120.4· x86_64 · tumbleweedSconosciuto · Corretta:
2021.20210325.svn34398-76.3Version impact unknown
dsa · texlive · opensuse · tumbleweed
- [perl-biber]Sconosciuto
Pacchetto sorgente: [texlive]
Dettagli (1)
2.21-120.4· noarch · tumbleweedSconosciuto · Corretta:
2021.20210325.svn34398-76.3Version impact unknown
dsa · texlive · opensuse · tumbleweed
- [texlive-12many]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.0.0.3svn15878-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-12many-doc]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.0.0.3svn15878-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-2up]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.1.3asvn55076-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-2up-doc]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.1.3asvn55076-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-a0poster]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.1.22bsvn54071-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-a0poster-doc]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.1.22bsvn54071-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-a2ping]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.2.84psvn52964-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-a2ping-bin]Sconosciuto
Pacchetto sorgente: [texlive]
Dettagli (1)
2026.20260301.svn27321-120.4· x86_64 · tumbleweedSconosciuto · Corretta:
2021.20210325.svn34398-76.3Version impact unknown
dsa · texlive · opensuse · tumbleweed
- [texlive-a2ping-doc]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.2.84psvn52964-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-a4wide]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.svn77682-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-a4wide-doc]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.svn77682-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-a5comb]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.4svn76924-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-a5comb-doc]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.4svn76924-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
- [texlive-aaai-named]Sconosciuto
Pacchetto sorgente: [texlive-specs-a]
Dettagli (1)
2026.226.svn76790-61.2· noarch · tumbleweedSconosciuto · Corretta:
2021.186.3.0_beta3svn33894-47.2Version impact unknown
dsa · texlive-specs-a · opensuse · tumbleweed
Osservato:
Riferimenti
- [https://osv.dev/vulnerability/DEBIAN-CVE-2016-10243]
- [https://osv.dev/vulnerability/DLA-847-1]
- [https://osv.dev/vulnerability/DSA-3803-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1203-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2016-10243]
- [https://osv.dev/vulnerability/USN-3401-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11431-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11433-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11434-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11435-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11436-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11437-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11438-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11439-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11440-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11441-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11442-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11443-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11444-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11445-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11446-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11447-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11448-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11449-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11450-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11451-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11452-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11453-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11454-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11455-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11456-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11457-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:11458-1]
- [https://security-tracker.debian.org/tracker/CVE-2016-10243]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]