- Vulnerability/
- USN-7027-1
USN-7027-1: Emacs vulnerabilities
First published: Thu Sep 19 2024(Updated: )
It was discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-45939) Xi Lu discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-48337) Xi Lu discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-48338) Xi Lu discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-48339) It was discovered that Emacs incorrectly handled filename sanitization. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-28617) It was discovered that Emacs incorrectly handled certain crafted files. An attacker could possibly use this issue to crash the program, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-30203, CVE-2024-30204, CVE-2024-30205) It was discovered that Emacs incorrectly handled certain crafted files. An attacker could possibly use this issue to execute arbitrary commands. (CVE-2024-39331)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/emacs | <1:29.3+1-1ubuntu2+esm1 | 1:29.3+1-1ubuntu2+esm1 |
| Ubuntu Ubuntu | =24.04 | |
| All of | ||
| ubuntu/emacs-bin-common | <1:29.3+1-1ubuntu2+esm1 | 1:29.3+1-1ubuntu2+esm1 |
| Ubuntu Ubuntu | =24.04 | |
| All of | ||
| ubuntu/emacs-common | <1:29.3+1-1ubuntu2+esm1 | 1:29.3+1-1ubuntu2+esm1 |
| Ubuntu Ubuntu | =24.04 | |
| All of | ||
| ubuntu/emacs-el | <1:29.3+1-1ubuntu2+esm1 | 1:29.3+1-1ubuntu2+esm1 |
| Ubuntu Ubuntu | =24.04 | |
| All of | ||
| ubuntu/emacs | <1:27.1+1-3ubuntu5.2 | 1:27.1+1-3ubuntu5.2 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/emacs-bin-common | <1:27.1+1-3ubuntu5.2 | 1:27.1+1-3ubuntu5.2 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/emacs-common | <1:27.1+1-3ubuntu5.2 | 1:27.1+1-3ubuntu5.2 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/emacs-el | <1:27.1+1-3ubuntu5.2 | 1:27.1+1-3ubuntu5.2 |
| Ubuntu Ubuntu | =22.04 | |
| All of | ||
| ubuntu/emacs | <1:26.3+1-1ubuntu2+esm1 | 1:26.3+1-1ubuntu2+esm1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/emacs-bin-common | <1:26.3+1-1ubuntu2+esm1 | 1:26.3+1-1ubuntu2+esm1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/emacs-common | <1:26.3+1-1ubuntu2+esm1 | 1:26.3+1-1ubuntu2+esm1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/emacs-el | <1:26.3+1-1ubuntu2+esm1 | 1:26.3+1-1ubuntu2+esm1 |
| Ubuntu Ubuntu | =20.04 | |
| All of | ||
| ubuntu/emacs25 | <25.2+1-6ubuntu0.1~esm2 | 25.2+1-6ubuntu0.1~esm2 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/emacs25-bin-common | <25.2+1-6ubuntu0.1~esm2 | 25.2+1-6ubuntu0.1~esm2 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/emacs25-common | <25.2+1-6ubuntu0.1~esm2 | 25.2+1-6ubuntu0.1~esm2 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/emacs25-el | <25.2+1-6ubuntu0.1~esm2 | 25.2+1-6ubuntu0.1~esm2 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/emacs24 | <24.5+1-6ubuntu1.1+esm4 | 24.5+1-6ubuntu1.1+esm4 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/emacs24-bin-common | <24.5+1-6ubuntu1.1+esm4 | 24.5+1-6ubuntu1.1+esm4 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/emacs24-common | <24.5+1-6ubuntu1.1+esm4 | 24.5+1-6ubuntu1.1+esm4 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/emacs24-el | <24.5+1-6ubuntu1.1+esm4 | 24.5+1-6ubuntu1.1+esm4 |
| Ubuntu Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2024-39331
- https://ubuntu.com/security/CVE-2024-30205
- https://ubuntu.com/security/CVE-2024-30203
- https://ubuntu.com/security/CVE-2023-28617
- https://ubuntu.com/security/CVE-2022-48339
- https://ubuntu.com/security/CVE-2024-30204
- https://ubuntu.com/security/CVE-2022-48338
- https://ubuntu.com/security/CVE-2022-48337
- https://ubuntu.com/security/CVE-2022-45939
- https://launchpad.net/bugs/2070418
- https://ubuntu.com/security/notices/USN-6003-1
- https://ubuntu.com/security/notices/USN-5955-1
- https://ubuntu.com/security/notices/USN-5781-1
- https://launchpad.net/ubuntu/+source/emacs/1:27.1+1-3ubuntu5.2
- https://ubuntu.com/security/notices/USN-7027-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
- collector/usn
- source/Ubuntu
- anchor-related/USN-6003-1
- anchor-related/USN-5955-1
- anchor-related/USN-5781-1
- agent/software-canonical-lookup
- agent/severity
- agent/title
- agent/references
- agent/last-modified-date
- agent/type
- agent/softwarecombine
- agent/description
- agent/event
- agent/first-publish-date
- agent/tags
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/24.04
- version/ubuntu ubuntu/22.04
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04