DeutschShown in its original language — a full translation is planned for a future version.
GNU Emacs: Mehrere Schwachstellen
view advisory published 2024-03-25
Ein Angreifer kann mehrere Schwachstellen in GNU Emacs ausnutzen, um beliebigen Programmcode auszuführen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-30205US | —OT elevated | — | ||
In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23. | ||||
| CVE-2024-30204US | —OT elevated | — | ||
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. | ||||
| CVE-2024-30203US | — | — | ||
In Emacs before 29.3, Gnus treats inline MIME contents as trusted. | ||||
| CVE-2024-30202US | — | — | ||
In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.23. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:6987 vom 2024-09-24external
- Red Hat Security Advisory RHSA-2024:7323 vom 2024-10-07external
- Red Hat Security Advisory RHSA-2024:7443 vom 2024-10-01external
- Red Hat Security Advisory RHSA-2024:9302 vom 2024-11-12external
- Rocky Linux Security Advisory RLSA-2024:9302 vom 2024-11-19external
- GitHub Advisory Database vom 2024-03-25external
- Oracle Linux Security Advisory ELSA-2024-6987 vom 2024-09-25external
- Debian Security Advisory DLA-3801 vom 2024-04-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan