dotnet / dotnet/vscode-dotnet-runtime

.NET Acquisition failed/ Arbitrary Command execution

Open
#1,106 0 comments 0 reactions 0 assignees View on GitHub
not-enough-detail
Dominant language
TypeScript
Stars
209
Forks
455
PR merge metrics
No merged PRs in 30d

Description

Looks like information from /etc/os-release is executed as a command, which might indicate a missing escaped string.
The connected system is a customized fedora.

**Repro steps:**

1. Open remote project via SSH.

**Extension Version:** 1.0.0
**Error Message:** .NET Acquisition Failed: Installation failed: /etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found

**Error Stack:** Error: .NET Acquisition Failed: Installation failed: /etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found

at /home/anonymous/.vscode-server/extensions/ms-dotnettools.vscode-dotnet-runtime-1.6.0/dist/extension.js:2:4766
at processTicksAndRejections (node:internal/process/task_queues:96:5)

```
cat /etc/os-release
NAME=Kontron TSN Starterkit
VERSION="r8 (kTSN2)"
ID=kTSN2
ID_LIKE=fedora
VERSION_ID=32
PRETTY_NAME="Kontron TSN Starterkit r8 (kTSN2)"
ANSI_COLOR="0;34"
LOGO=kontron-logo-icon
CPE_NAME="cpe:/o:kontron:ktsn:r8"
HOME_URL="http://www.kontron.com/"
SUPPORT_URL="www.kontron.com"
BUG_REPORT_URL="www.kontron.com"
PRIVACY_POLICY_URL="www.kontron.com"
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.