dotnet / dotnet/vscode-dotnet-runtime
.NET Acquisition failed/ Arbitrary Command execution
- Dominant language
- TypeScript
- Stars
- 209
- Forks
- 455
- PR merge metrics
- No merged PRs in 30d
Description
Looks like information from /etc/os-release is executed as a command, which might indicate a missing escaped string.
The connected system is a customized fedora.
**Repro steps:**
1. Open remote project via SSH.
**Extension Version:** 1.0.0
**Error Message:** .NET Acquisition Failed: Installation failed: /etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
**Error Stack:** Error: .NET Acquisition Failed: Installation failed: /etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
/etc/os-release: line 1: TSN: command not found
at /home/anonymous/.vscode-server/extensions/ms-dotnettools.vscode-dotnet-runtime-1.6.0/dist/extension.js:2:4766
at processTicksAndRejections (node:internal/process/task_queues:96:5)
```
cat /etc/os-release
NAME=Kontron TSN Starterkit
VERSION="r8 (kTSN2)"
ID=kTSN2
ID_LIKE=fedora
VERSION_ID=32
PRETTY_NAME="Kontron TSN Starterkit r8 (kTSN2)"
ANSI_COLOR="0;34"
LOGO=kontron-logo-icon
CPE_NAME="cpe:/o:kontron:ktsn:r8"
HOME_URL="http://www.kontron.com/"
SUPPORT_URL="www.kontron.com"
BUG_REPORT_URL="www.kontron.com"
PRIVACY_POLICY_URL="www.kontron.com"
```
Contributor guide
Assessment
This issue has not been assessed yet.