GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the ctags program. For example, a victim may use the "ctags *" command (suggested in the ctags documentation) in a situation where the current working directory has contents that depend on untrusted input.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-emacsalma-upgrade-emacs-commonalma-upgrade-emacs-filesystemalma-upgrade-emacs-lucidalma-upgrade-emacs-noxalma-upgrade-emacs-terminal | May 15, 2023 | Nov 28, 2022 | |
| Alpine Linux | alpine-linux-upgrade-emacs | Aug 22, 2024 | Nov 28, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-emacsamazon-linux-ami-2-upgrade-emacs-commonamazon-linux-ami-2-upgrade-emacs-debuginfoamazon-linux-ami-2-upgrade-emacs-develamazon-linux-ami-2-upgrade-emacs-filesystemamazon-linux-ami-2-upgrade-emacs-lucidamazon-linux-ami-2-upgrade-emacs-noxamazon-linux-ami-2-upgrade-emacs-terminal | Feb 7, 2023 | Nov 28, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-emacs | Apr 6, 2023 | Nov 28, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-emacsamazon-linux-2023-upgrade-emacs-commonamazon-linux-2023-upgrade-emacs-common-debuginfoamazon-linux-2023-upgrade-emacs-debuginfoamazon-linux-2023-upgrade-emacs-debugsourceamazon-linux-2023-upgrade-emacs-develamazon-linux-2023-upgrade-emacs-filesystemamazon-linux-2023-upgrade-emacs-lucidamazon-linux-2023-upgrade-emacs-lucid-debuginfoamazon-linux-2023-upgrade-emacs-noxamazon-linux-2023-upgrade-emacs-nox-debuginfoamazon-linux-2023-upgrade-emacs-terminal | Feb 17, 2025 | Nov 27, 2022 | |
| Centos_linux | — | centos-upgrade-emacscentos-upgrade-emacs-commoncentos-upgrade-emacs-common-debuginfocentos-upgrade-emacs-debuginfocentos-upgrade-emacs-debugsourcecentos-upgrade-emacs-filesystemcentos-upgrade-emacs-lucidcentos-upgrade-emacs-lucid-debuginfocentos-upgrade-emacs-noxcentos-upgrade-emacs-nox-debuginfocentos-upgrade-emacs-terminal | May 15, 2023 | Nov 28, 2022 |
| Debian | debian-upgrade-emacsdebian-upgrade-xemacs21 | Jan 4, 2023 | Nov 28, 2022 | |
| Freebsd | freebsd-upgrade-package-emacsfreebsd-upgrade-package-emacs-cannafreebsd-upgrade-package-emacs-noxfreebsd-upgrade-package-emacs-develfreebsd-upgrade-package-emacs-devel-nox | Jan 14, 2023 | Jan 12, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-emacs-filesystem | Feb 13, 2023 | Nov 28, 2022 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-emacs-filesystem | Mar 24, 2023 | Nov 28, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-emacs-commonhuawei-euleros-2_0_sp8-upgrade-emacs-filesystemhuawei-euleros-2_0_sp8-upgrade-emacs-nox | Apr 13, 2023 | Nov 28, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-emacs-filesystem | Mar 9, 2023 | Nov 28, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-emacsoracle-linux-upgrade-emacs-commonoracle-linux-upgrade-emacs-filesystemoracle-linux-upgrade-emacs-lucidoracle-linux-upgrade-emacs-noxoracle-linux-upgrade-emacs-terminal | May 17, 2023 | Nov 27, 2022 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-emacsredhat-upgrade-emacs-commonredhat-upgrade-emacs-common-debuginforedhat-upgrade-emacs-debuginforedhat-upgrade-emacs-debugsourceredhat-upgrade-emacs-filesystemredhat-upgrade-emacs-lucidredhat-upgrade-emacs-lucid-debuginforedhat-upgrade-emacs-noxredhat-upgrade-emacs-nox-debuginforedhat-upgrade-emacs-terminal | May 15, 2023 | Nov 28, 2022 | |
| Suse | — | suse-upgrade-emacssuse-upgrade-emacs-elsuse-upgrade-emacs-infosuse-upgrade-emacs-noxsuse-upgrade-emacs-x11suse-upgrade-etags | Dec 2, 2022 | Nov 28, 2022 |
| Ubuntu | ubuntu-pro-upgrade-emacsubuntu-pro-upgrade-emacs-bin-commonubuntu-pro-upgrade-emacs-commonubuntu-pro-upgrade-emacs-elubuntu-pro-upgrade-emacs24ubuntu-pro-upgrade-emacs24-bin-commonubuntu-pro-upgrade-emacs24-commonubuntu-pro-upgrade-emacs24-elubuntu-pro-upgrade-emacs25ubuntu-pro-upgrade-emacs25-bin-commonubuntu-pro-upgrade-emacs25-commonubuntu-pro-upgrade-emacs25-elubuntu-upgrade-emacsubuntu-upgrade-emacs-bin-commonubuntu-upgrade-emacs-commonubuntu-upgrade-emacs-el | Dec 15, 2022 | Nov 28, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 28, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub