Advisory ROSA-SA-2023-2191

🗓️ 18 Jul 2023 11:16:22Reported by ROSA LABType

rosalinux

rosalinux🔗 abf.rosa.ru👁 37 Views

Advisory ROSA-SA-2023-2191, emacs 24.3-23 has a command injection vulnerability allowing arbitrary code execution

Reporter	Title	Published	Views	Family All 167
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect	30 Aug 202317:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities (CVE-2023-2828, CVE-2023-24329, CVE-2022-4839)	14 Nov 202315:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services December 2023 - Multiple CVEs addressed	15 Jan 202407:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	24 Oct 202319:01	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.12 addresses multiple security vulnerabilities.	2 Apr 202411:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for December 2023.	17 Jan 202407:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2023 - Multiple CVEs addressed	8 Jan 202409:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data and Db2 Warehouse® on Cloud Pak for Data	14 Feb 202418:12	–	ibm
FreeBSD	emacs -- multiple vulnerabilities	6 Dec 202200:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2023-122)	21 Mar 202300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
rosa	any	noarch	emacs	24.3	UNKNOWN

18 Jul 2023 11:16Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

EPSS0.01132

SSVC

advisory rosa software emacs os rosa-server79 vulnerability command injection arbitrary code execution cve-2022-48339 fixed yum update.