GCVE-110-MAGEIA-2023-3

Advisory Published

Vulnetix · Advisory published January 13, 2023

A flaw was found in Exuberant Ctags in the way it handles the "-o" option. This option specifies the tag filename. A crafted tag filename specified in the command line or in the configuration file results in arbitrary command execution because the externalSortTags() in sort.c calls the system(3) function in an unsafe way. (CVE-2022-4515)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	ctags	0 (affected), 5.8-15.1.mga8 (unaffected)	—

References

Updated ctags packages fix security vulnerability

advisory

Updated ctags packages fix security vulnerability

issue

Updated ctags packages fix security vulnerability

url

Browse GCVE Records

20,069 records in the GCVE database · Updated October 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON