CVE-2024-30202

2024-03-2515:15:52

Debian Security Bug Tracker

security-tracker.debian.org

emacs

org mode

arbitrary code

execution

security vulnerability

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23.

OSVersionArchitecturePackageVersionFilename
Debian12allemacs< 1:28.2+1-15+deb12u1emacs_1:28.2+1-15+deb12u1_all.deb
Debian11allemacs< 1:27.1+1-3.1+deb11u4emacs_1:27.1+1-3.1+deb11u4_all.deb
Debian999allemacs< 1:29.3+1-1emacs_1:29.3+1-1_all.deb
Debian13allemacs< 1:29.3+1-1emacs_1:29.3+1-1_all.deb
Debian12allorg-mode<= 9.5.2+dfsh-5org-mode_9.5.2+dfsh-5_all.deb
Debian11allorg-mode< 9.4.0+dfsg-1+deb11u2org-mode_9.4.0+dfsg-1+deb11u2_all.deb
Debian999allorg-mode< 9.6.23+dfsg-1org-mode_9.6.23+dfsg-1_all.deb
Debian13allorg-mode< 9.6.23+dfsg-1org-mode_9.6.23+dfsg-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	emacs	< 1:28.2+1-15+deb12u1	emacs_1:28.2+1-15+deb12u1_all.deb
Debian	11	all	emacs	< 1:27.1+1-3.1+deb11u4	emacs_1:27.1+1-3.1+deb11u4_all.deb
Debian	999	all	emacs	< 1:29.3+1-1	emacs_1:29.3+1-1_all.deb
Debian	13	all	emacs	< 1:29.3+1-1	emacs_1:29.3+1-1_all.deb
Debian	12	all	org-mode	<= 9.5.2+dfsh-5	org-mode_9.5.2+dfsh-5_all.deb
Debian	11	all	org-mode	< 9.4.0+dfsg-1+deb11u2	org-mode_9.4.0+dfsg-1+deb11u2_all.deb
Debian	999	all	org-mode	< 9.6.23+dfsg-1	org-mode_9.6.23+dfsg-1_all.deb
Debian	13	all	org-mode	< 9.6.23+dfsg-1	org-mode_9.6.23+dfsg-1_all.deb