Lucene search
China National Vulnerability DatabaseCNVD-2022-85329HistoryNov 30, 2022 - 12:00 a.m.
GNU Emacs Command Injection Vulnerability
2022-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
gnu emacs
command injection
vulnerability
version 28.2
lib-src/etags.c
system c library functions
ctags program
arbitrary commands
exploit
0.001 Low
EPSS
Percentile
34.4%
GNU Emacs is a family of text editors from the GNU community in the U.S. A command injection vulnerability exists in GNU Emacs version 28.2 and earlier, which stems from lib-src/etags.c’s use of system C library functions when implementing the ctags program. An attacker could exploit the vulnerability to execute arbitrary commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gnu gnu emacs | le | 28.2 |
Related
fedora
fedora
[SECURITY] Fedora 37 Update: emacs-28.2-1.fc37
2023-01-03 01:25:38
[SECURITY] Fedora 36 Update: emacs-28.2-1.fc36
2023-01-11 01:35:01
openvas
openvas
Ubuntu: Security Advisory (USN-5781-1)
2022-12-15 00:00:00
Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2023-1887)
2023-05-16 00:00:00
Debian: Security Advisory (DLA-3257-1)
2023-01-01 00:00:00
nessus
nessus
FreeBSD : emacs -- arbitary shell command execution vulnerability of ctags (76e2fcce-92d2-11ed-a635-080027f5fec9)
2023-01-13 00:00:00
EulerOS 2.0 SP11 : emacs (EulerOS-SA-2023-1582)
2023-03-24 00:00:00
Oracle Linux 9 : emacs (ELSA-2023-2366)
2023-05-15 00:00:00
redhatcve
redhatcve
CVE-2022-45939
2022-11-29 18:59:30
oraclelinux
oraclelinux
emacs security and bug fix update
2023-05-15 00:00:00
emacs security and bug fix update
2023-05-24 00:00:00
ubuntucve
ubuntucve
CVE-2022-45939
2022-11-28 00:00:00
osv
osv
emacs - security update
2023-01-11 00:00:00
CVE-2022-45939
2022-11-28 06:15:00
Moderate: emacs security and bug fix update
2023-05-09 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-45939 affecting package emacs for versions less than 28.1-5
2023-01-03 20:57:36
freebsd
freebsd
emacs -- arbitary shell command execution vulnerability of ctags
2022-11-28 00:00:00
mageia
mageia
Updated emacs packages fix security vulnerability
2022-12-14 01:09:19
debiancve
debiancve
CVE-2022-45939
2022-11-28 06:15:10
redhat
redhat
(RHSA-2023:2366) Moderate: emacs security and bug fix update
2023-05-09 05:08:40
(RHSA-2023:3042) Moderate: emacs security and bug fix update
2023-05-16 06:01:30
(RHSA-2024:1103) Moderate: emacs security update
2024-03-05 10:44:53
alpinelinux
alpinelinux
CVE-2022-45939
2022-11-28 06:15:10
slackware
slackware
[slackware-security] emacs
2024-03-24 18:25:32
[slackware-security] emacs
2022-12-08 22:51:56
almalinux
almalinux
Moderate: emacs security and bug fix update
2023-05-09 00:00:00
Moderate: emacs security and bug fix update
2023-05-16 00:00:00
prion
prion
Input validation
2022-11-28 06:15:00
debian
debian
[SECURITY] [DSA 5314-1] emacs security update
2023-01-11 18:59:48
[SECURITY] [DLA 3257-1] emacs security update
2022-12-31 20:00:00
cvelist
cvelist
CVE-2022-45939
2022-11-28 00:00:00
amazon
amazon
Important: emacs
2023-01-30 16:03:00
Important: emacs
2023-03-30 22:50:00
cve
cve
CVE-2022-45939
2022-11-28 06:15:10
ubuntu
ubuntu
Emacs vulnerability
2022-12-14 00:00:00
nvd
nvd
CVE-2022-45939
2022-11-28 06:15:10
veracode
veracode
OS Command Injection
2022-12-04 00:37:54
photon
photon
Important Photon OS Security Update - PHSA-2022-3.0-0499
2022-12-06 00:00:00
Important Photon OS Security Update - PHSA-2022-0293
2022-12-06 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0293
2022-12-06 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2433
2024-06-17 09:05:21
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps
2023-09-28 07:46:35