CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
35.4%
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the “org-babel-execute:latex” function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
Vendor | Product | Version | CPE |
---|---|---|---|
gnu | emacs | 26.1-9.el8 | cpe:2.3:a:gnu:emacs:26.1-9.el8:*:*:*:*:*:*:* |
gnu | emacs | 27.2-8.el9 | cpe:2.3:a:gnu:emacs:27.2-8.el9:*:*:*:*:*:*:* |
redhat | enterprise_linux | 8.0 | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
redhat | enterprise_linux | 9.0 | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
redhat | enterprise_linux_eus | 8.8 | cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* |
redhat | enterprise_linux_eus | 9.2 | cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* |
redhat | enterprise_linux_server_aus | 8.8 | cpe:2.3:o:redhat:enterprise_linux_server_aus:8.8:*:*:*:*:*:*:* |
redhat | enterprise_linux_server_aus | 9.2 | cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* |
redhat | enterprise_linux_server_tus | 8.8 | cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* |
[
{
"vendor": "n/a",
"product": "emacs",
"versions": [
{
"version": "Affects emacs v26.1-9.el8 and emacs v27.2-8.el9, Fixed in emacs v26.1-10.el8_8.2 and emacs v27.2-8.el9_2.1",
"status": "affected"
}
]
}
]