Lucene search
Veracode Vulnerability DatabaseVERACODE:46240HistoryApr 05, 2024 - 10:36 p.m.
Arbitrary Code Execution
2024-04-0522:36:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
emacs
org mode
vulnerability
arbitrary code execution
software
emacs is vulnerable to Arbitrary Code Execution. The vulnerability is due to a lack of proper validation of user input during the activation process of Org mode in Emacs, allowing the execution of arbitrary Lisp code during the activation process.
| CPE | Name | Operator | Version |
|---|---|---|---|
| emacs:sid | eq | 1:27.1+1-3 | |
| org-mode:sid | eq | 9.4.0+dfsg-1 | |
| emacs:sid | eq | 1:27.1+1-3 | |
| org-mode:sid | eq | 9.4.0+dfsg-1 | |
| emacs:bookworm | eq | 1:27.1+1-3.1 |
References
www.openwall.com/lists/oss-security/2024/03/25/2
www.openwall.com/lists/oss-security/2024/04/08/6
git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=befa9fcaae29a6c9a283ba371c3c5234c7f644eb
git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29
git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=003ddacf1c8d869b1858181c29ea21b731a8d8d9
security-tracker.debian.org/tracker/CVE-2024-30202
Related
nvd
nvd
CVE-2024-30202
2024-03-25 15:15:52
cbl_mariner
cbl_mariner
CVE-2024-30202 affecting package emacs for versions less than 29.3-1
2024-04-09 20:48:36
CVE-2024-30202 affecting package emacs for versions less than 29.3-1
2024-04-17 22:02:46
redhatcve
redhatcve
CVE-2024-30202
2024-05-14 04:11:13
debiancve
debiancve
CVE-2024-30202
2024-03-25 15:15:52
ubuntucve
ubuntucve
CVE-2024-30202
2024-03-25 00:00:00
cve
cve
CVE-2024-30202
2024-03-25 15:15:52
cvelist
cvelist
CVE-2024-30202
2024-03-25 00:00:00
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0104)
2024-04-05 00:00:00
freebsd
freebsd
emacs -- multiple vulnerabilities
2024-03-24 00:00:00
debian
debian
[BSA-119] Security Update for emacs
2024-04-27 12:15:26
mageia
mageia
Updated emacs packages fix security vulnerabilities
2024-03-31 06:27:58