Unscored USN-3650-1 1 CVE

xdg-utils vulnerability

Published May 21, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that xdg-utils incorrectly handled certain inputs.
An attacker could possibly use this to execute arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	xdg-utils	1.1.0~rc1-2ubuntu7.2
Ubuntu · 16.04 LTS 16.04:LTS	xdg-utils	1.1.1-1ubuntu1.16.04.3
Ubuntu · 18.04 LTS 18.04:LTS	xdg-utils	1.1.2-1ubuntu2.2

Vulnerabilities 1

Unscored —

CVE-2017-18266

The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program s…

xdg-utils xdg-utils Debian Ubuntu

May 10, 2018

References

report
https://ubuntu.com/security/CVE-2017-18266