CVE-2022-48339

🗓️ 20 Feb 2023 23:15:00Reported by Alpine Linux Development TeamType

alpinelinux

alpinelinux🔗 security.alpinelinux.org👁 31 Views

An issue in GNU Emacs htmlfontify.el allows command injection through external inpu

Reporter	Title	Published	Views	Family All 168
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect	30 Aug 202317:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities (CVE-2023-2828, CVE-2023-24329, CVE-2022-4839)	14 Nov 202315:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services December 2023 - Multiple CVEs addressed	15 Jan 202407:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	24 Oct 202319:01	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.12 addresses multiple security vulnerabilities.	2 Apr 202411:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2023.	17 Jan 202407:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2023 - Multiple CVEs addressed	8 Jan 202409:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data	14 Feb 202418:12	–	ibm
FreeBSD	emacs -- multiple vulnerabilities	6 Dec 202200:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2023-122)	21 Mar 202300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Alpine	3.18-community	noarch	emacs	28.2-r8	UNKNOWN

07 Nov 2023 03:56Current

8High risk

Vulners AI Score8

CVSS 3.17.8

EPSS0.01132

SSVC

gnu emacs htmlfontify.el command injection external input vulnerability