Lucene search
GoogleOSV:CVE-2022-48339HistoryFeb 20, 2023 - 11:15 p.m.
CVE-2022-48339
2023-02-2023:15:00
Google
osv.dev
8
An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be executed.
References
git.savannah.gnu.org/cgit/emacs.git/commit/?id=1b4dc4691c1f87fc970fbe568b43869a15ad0d4c
lists.debian.org/debian-lts-announce/2023/05/msg00008.html
lists.fedoraproject.org/archives/list/[email protected]/message/FLPQ4K6H2S5TY3L5UDN4K4B3L5RQJYQ6/
lists.fedoraproject.org/archives/list/[email protected]/message/U6HDBUQNAH2WL4MHWCTUZLN7NGF7CHTK/
www.debian.org/security/2023/dsa-5360
Related
prion
prion
Command injection
2023-02-20 23:15:00
nessus
nessus
Oracle Linux 7 : emacs (ELSA-2023-3481)
2023-06-07 00:00:00
CentOS 7 : emacs (RHSA-2023:3481)
2023-07-28 00:00:00
RHEL 7 : emacs (RHSA-2023:3481)
2023-06-06 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2191
2023-07-18 11:16:22
redhat
redhat
(RHSA-2023:3481) Moderate: emacs security update
2023-06-06 12:41:25
(RHSA-2023:7083) Moderate: emacs security update
2023-11-14 08:44:40
(RHSA-2024:1408) Moderate: emacs security update
2024-03-19 16:35:16
ubuntucve
ubuntucve
CVE-2022-48339
2023-02-20 00:00:00
cvelist
cvelist
CVE-2022-48339
2023-02-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-48339 affecting package emacs for versions less than 28.2-4
2023-03-17 17:25:17
alpinelinux
alpinelinux
CVE-2022-48339
2023-02-20 23:15:00
redhatcve
redhatcve
CVE-2022-48339
2023-02-21 06:30:16
cve
cve
CVE-2022-48339
2023-02-20 23:15:12
centos
centos
emacs security update
2023-07-27 14:34:56
oraclelinux
oraclelinux
emacs security update
2023-06-07 00:00:00
emacs security update
2023-11-17 00:00:00
emacs security update
2023-05-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5955-1)
2023-03-16 00:00:00
CentOS: Security Advisory for emacs (CESA-2023:3481)
2023-07-30 00:00:00
Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2023-3397)
2023-12-14 00:00:00
veracode
veracode
Command Injection
2023-03-11 19:20:45
debiancve
debiancve
CVE-2022-48339
2023-02-20 23:15:12
osv
osv
emacs24 vulnerability
2023-03-15 12:47:43
Moderate: emacs security update
2023-11-14 00:00:00
emacs - security update
2023-05-10 00:00:00
almalinux
almalinux
Moderate: emacs security update
2023-11-14 00:00:00
Important: emacs security update
2023-05-09 00:00:00
amazon
amazon
Important: emacs
2023-03-30 22:50:00
Important: emacs
2023-03-02 22:35:00
mageia
mageia
Updated emacs packages fix security vulnerability
2023-03-02 00:14:31
fedora
fedora
[SECURITY] Fedora 37 Update: emacs-28.3-0.rc1.fc37
2023-10-14 01:27:02
[SECURITY] Fedora 38 Update: emacs-28.3-0.rc1.fc38
2023-09-28 01:37:30
freebsd
freebsd
emacs -- multiple vulnerabilities
2022-12-06 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0544
2023-03-06 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0348
2023-03-06 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0010
2023-05-23 00:00:00
