{"id":"CVE-2022-4515","aliases":["ALSA-2023:2863","AZL-12083","AZL-34647","DEBIAN-CVE-2022-4515","DLA-3254-1","EUVD-2022-51855","GHSA-qr9x-29jh-mg6x","MGASA-2023-0003","OESA-2023-1693","OESA-2023-1694","RHSA-2023:2863","RLSA-2023:2863","SUSE-SU-2023:0224-1","SUSE-SU-2023:0225-1","UBUNTU-CVE-2022-4515","USN-5820-1","openSUSE-SU-2024:12624-1"],"status":"published","title":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies...","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00608,"percentile":0.4936,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2022-12-20T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"ctags","fixed_in":["5.8-23.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ctags-etags","fixed_in":["5.8-23.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"ctags","fixed_in":["5.9.20220619.0-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ctags","fixed_in":["6.1.0-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"exuberant-ctags","fixed_in":["1:5.9~svn20110310-18"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"exuberant-ctags","fixed_in":["1:5.9~svn20110310-18"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"exuberant-ctags","fixed_in":["1:5.9~svn20110310-18"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"exuberant-ctags","fixed_in":["1:5.9~svn20110310-12+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"ctags","fixed_in":["5.8-15.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"ctags","fixed_in":["5.8-28.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"ctags","fixed_in":["5.8-29.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ctags","fixed_in":["0:5.8-23.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ctags-debuginfo","fixed_in":["0:5.8-23.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ctags-debugsource","fixed_in":["0:5.8-23.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ctags-debuginfo","fixed_in":["0:5.8-23.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ctags-debugsource","fixed_in":["0:5.8-23.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ctags-etags","fixed_in":["0:5.8-23.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"ctags","fixed_in":["0:5.8-23.el8"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"ctags","fixed_in":["5.8-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ctags","fixed_in":["5.8-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ctags","fixed_in":["5.8-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ctags","fixed_in":["5.8-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ctags","fixed_in":["5.8-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ctags","fixed_in":["5.8-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ctags","fixed_in":["5.8-8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"ctags","fixed_in":["5.8-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exuberant-ctags","fixed_in":["1:5.9~svn20110310-11ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"exuberant-ctags","fixed_in":["1:5.9~svn20110310-11ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"exuberant-ctags","fixed_in":["1:5.9~svn20110310-12ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"exuberant-ctags","fixed_in":["1:5.9~svn20110310-16ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ctags","fixed_in":["5.8-12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-23.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ctags-etags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-23.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.20220619.0-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.0-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-18"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-18"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-18"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-12+deb10u1"}]}],"versions":["1:5.9~svn20110310-12"]},{"source":"osv","ecosystem":"Mageia:8","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-15.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-28.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-29.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8-23.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ctags-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8-23.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ctags-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8-23.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ctags-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8-23.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ctags-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8-23.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ctags-etags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8-23.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8-23.el8"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-11ubuntu0.1~esm1"}]}],"versions":["1:5.9~svn20110310-9","1:5.9~svn20110310-10","1:5.9~svn20110310-11"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-11ubuntu0.1"}]}],"versions":["1:5.9~svn20110310-11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-12ubuntu0.1"}]}],"versions":["1:5.9~svn20110310-12"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-16ubuntu0.22.04.1"}]}],"versions":["1:5.9~svn20110310-15","1:5.9~svn20110310-16","1:5.9~svn20110310-16build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-11ubuntu0.1~esm1"}]}],"versions":["1:5.9~svn20110310-9","1:5.9~svn20110310-10","1:5.9~svn20110310-11"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-11ubuntu0.1"}]}],"versions":["1:5.9~svn20110310-11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-12ubuntu0.1"}]}],"versions":["1:5.9~svn20110310-12"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"exuberant-ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:5.9~svn20110310-16ubuntu0.22.04.1"}]}],"versions":["1:5.9~svn20110310-15","1:5.9~svn20110310-16","1:5.9~svn20110310-16build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ctags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8-12.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"exuberant_ctags_project","product":"exuberant_ctags"}],"references":[{"url":"https://sourceforge.net/p/ctags/code/HEAD/tree/tags/ctags-5.8/sort.c#l56","tags":["x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00040.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4515","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-qr9x-29jh-mg6x"},{"url":"https://access.redhat.com/errata/RHSA-2023:2863","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4515","tags":["report"]},{"url":"https://bugzilla.redhat.com/2153519","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2863.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-4515","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0003.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31359","tags":["report"]},{"url":"https://www.debian.org/lts/security/2022/dla-3254","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1693","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1694","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153519","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2863.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4515","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2863","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230224-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206543","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4515","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230225-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-4515","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5820-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-4515","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","status":"published","published":"2022-12-20T00:00:00Z","modified":"2025-04-14T18:14:57.235Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2022-51855","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","status":"published","published":"2022-12-20T00:00:00Z","modified":"2025-04-14T18:14:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:33.06705Z"}],"ghsa":[{"id":"GHSA-qr9x-29jh-mg6x","title":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies...","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","status":"published","published":"2022-12-20T21:30:19Z","modified":"2023-01-27T05:01:36Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:41:55.795759Z"}],"nvd":[{"id":"CVE-2022-4515","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","status":"published","published":"2022-12-20T19:15:25.19Z","modified":"2026-06-17T05:21:05.19Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:07:34.031641Z"}],"osv":[{"id":"AZL-12083","title":"CVE-2022-4515 affecting package ctags for versions less than 5.9.20220619.0-7","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","status":"published","published":"2022-12-20T19:15:25Z","modified":"2026-04-21T04:22:23.528556Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"AZL-34647","title":"CVE-2022-4515 affecting package ctags for versions less than 6.1.0-1","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","status":"published","published":"2022-12-20T19:15:25Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"CVE-2022-4515","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","status":"published","published":"2022-12-20T19:15:25.19Z","modified":"2026-04-16T04:30:51.323007779Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"DEBIAN-CVE-2022-4515","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","status":"published","published":"2022-12-20T19:15:25.19Z","modified":"2026-11-03T08:02:29.31946044Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2023-1693","title":"ctags security update","description":"Ctags generates an index (or tag) file of language objects found in source files that allows these items to be quickly and easily located by a text editor or other utility. A tag signifies a language object for which an index entry is available (or, alternatively, the index entry created for that object).\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in Exuberant Ctags in the way it handles the \u0026quot;-o\u0026quot; option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.(CVE-2022-4515)","status":"published","published":"2023-09-28T11:06:08Z","modified":"2026-08-18T01:17:53.742084226Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1694","title":"ctags security update","description":"Ctags generates an index (or tag) file of language objects found in source files that allows these items to be quickly and easily located by a text editor or other utility. A tag signifies a language object for which an index entry is available (or, alternatively, the index entry created for that object).\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in Exuberant Ctags in the way it handles the \u0026quot;-o\u0026quot; option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.(CVE-2022-4515)","status":"published","published":"2023-09-28T11:06:08Z","modified":"2026-08-18T01:17:53.746913189Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:2863","title":"Red Hat Security Advisory: ctags security update","status":"published","published":"2024-09-16T10:05:06Z","modified":"2026-06-26T12:22:11.033836286Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RLSA-2023:2863","title":"Moderate: ctags security update","description":"Ctags is a C programming language indexing and cross-reference tool.\n\nSecurity Fix(es):\n\n* ctags: arbitrary command execution via a tag file with a crafted filename (CVE-2022-4515)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","status":"published","published":"2026-06-25T12:01:05.792943Z","modified":"2026-06-25T12:30:04.281472712Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2022-4515","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way.","status":"published","published":"2022-12-20T19:15:00Z","modified":"2026-02-04T02:59:20.744528Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"ALSA-2023:2863","title":"Moderate: ctags security update","description":"Ctags is a C programming language indexing and cross-reference tool.\n\nSecurity Fix(es):\n\n* ctags: arbitrary command execution via a tag file with a crafted filename (CVE-2022-4515)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:04.467848934Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DLA-3254-1","title":"exuberant-ctags - security update","status":"published","published":"2022-12-31T00:00:00Z","modified":"2026-03-09T01:17:58.744116Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2023-0003","title":"Updated ctags packages fix security vulnerability","description":"A flaw was found in Exuberant Ctags in the way it handles the \"-o\" option.\nThis option specifies the tag filename. A crafted tag filename specified\nin the command line or in the configuration file results in arbitrary\ncommand execution because the externalSortTags() in sort.c calls the\nsystem(3) function in an unsafe way. (CVE-2022-4515)\n","status":"published","published":"2023-01-13T17:37:09Z","modified":"2026-04-16T04:43:37.415976571Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12624-1","title":"ctags-5.8-12.1 on GA media","description":"These are all security issues fixed in the ctags-5.8-12.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:18:44.028578Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0224-1","title":"Security update for ctags","description":"This update for ctags fixes the following issues:\n\n- CVE-2022-4515: Fixed a command injection issue via a tag file wih a\n  crafted filename (bsc#1206543).\n","status":"published","published":"2023-02-01T08:36:40Z","modified":"2026-02-04T04:14:18.451932Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0225-1","title":"Security update for ctags","description":"This update for ctags fixes the following issues:\n\n- CVE-2022-4515: Fixed a command injection issue via a tag file wih a\n  crafted filename (bsc#1206543).\n","status":"published","published":"2023-02-01T08:37:57Z","modified":"2026-02-04T04:06:27.774525Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5820-1","title":"exuberant-ctags vulnerability","description":"Lorenz Hipp discovered a flaw in exuberant-ctags handling of the tag \nfilename command-line argument. A crafted tag filename specified \nin the command line or in the configuration file could result in \narbitrary command execution.\n","status":"published","published":"2023-01-24T02:19:20Z","modified":"2026-06-25T13:31:42.767988257Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}