Lucene search
Gentoo FoundationMGASA-2023-0152HistoryApr 24, 2023 - 3:20 a.m.
Updated emacs packages fix security vulnerability
2023-04-2403:20:26
Gentoo Foundation
advisories.mageia.org
19
emacs
packages
security
vulnerability
org mode
arbitrary commands
shell metacharacters
directory name
cve-2023-28617
unix
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.2%
org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | emacs | < 27.1-1.4 | emacs-27.1-1.4.mga8 |
Related
redhatcve
redhatcve
CVE-2023-28617
2023-03-24 13:07:51
CVE-2023-2491
2023-05-03 12:16:44
oraclelinux
oraclelinux
emacs security update
2023-04-24 00:00:00
emacs security update
2023-05-02 00:00:00
nessus
nessus
RHEL 8 : emacs (RHSA-2023:1930)
2023-04-25 00:00:00
RHEL 9 : emacs (RHSA-2023:2010)
2023-04-25 00:00:00
Ubuntu 16.04 ESM : Emacs vulnerability (USN-6003-1)
2023-04-06 00:00:00
rocky
rocky
emacs security update
2023-05-05 15:41:01
emacs security update
2023-04-26 15:28:03
veracode
veracode
OS Command Injection
2023-08-06 07:40:29
cbl_mariner
cbl_mariner
CVE-2023-28617 affecting package emacs for versions less than 28.2-5
2023-03-30 01:18:53
osv
osv
Important: emacs security update
2023-04-26 15:28:03
CVE-2023-28617
2023-03-19 03:15:11
emacs24 vulnerability
2023-04-06 16:15:35
openvas
openvas
Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2023-2639)
2023-09-05 00:00:00
Mageia: Security Advisory (MGASA-2023-0152)
2023-04-24 00:00:00
Debian: Security Advisory (DLA-3616-1)
2023-10-13 00:00:00
cvelist
cvelist
CVE-2023-28617
2023-03-19 00:00:00
CVE-2023-2491
2023-05-17 00:00:00
redhat
redhat
(RHSA-2023:3189) Important: emacs security update
2023-05-17 15:12:59
(RHSA-2023:1915) Important: emacs security update
2023-04-20 13:16:34
(RHSA-2023:2074) Important: emacs security update
2023-05-02 07:07:42
almalinux
almalinux
Important: emacs security update
2023-05-02 00:00:00
Important: emacs security update
2023-04-24 00:00:00
Important: emacs security update
2023-05-16 00:00:00
debian
debian
[SECURITY] [DLA 3616-1] org-mode security update
2023-10-12 11:09:58
[SECURITY] [DLA 3416-1] emacs security update
2023-05-09 23:02:24
cve
cve
CVE-2023-28617
2023-03-19 03:15:11
CVE-2023-2491
2023-05-17 22:15:10
nvd
nvd
CVE-2023-28617
2023-03-19 03:15:11
CVE-2023-2491
2023-05-17 22:15:10
prion
prion
Design/Logic Flaw
2023-03-19 03:15:00
Command injection
2023-05-17 22:15:00
ubuntu
ubuntu
Emacs vulnerability
2023-04-06 00:00:00
ubuntucve
ubuntucve
CVE-2023-28617
2023-03-19 00:00:00
CVE-2023-2491
2023-05-17 00:00:00
amazon
amazon
Important: emacs
2023-04-13 19:28:00
debiancve
debiancve
CVE-2023-28617
2023-03-19 03:15:11
CVE-2023-2491
2023-05-17 22:15:10
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps
2023-09-28 07:46:35
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
30.2%
Related for MGASA-2023-0152