CVE-2024-30203

Katalog CVE

CVSS 5.5 · Medium EPSS 0,58%

Kerentanan pada gnu emacs, gnu org mode +1 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut CISA ADP.

Deskripsi (NVD)

In Emacs before 29.3, Gnus treats inline MIME contents as trusted.

Rincian

Terbit di NVD

25 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,58% peluang dieksploitasi; lebih tinggi dari 46,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=937b9042ad7426acdcca33e3d931d8f495bdd804 patch
• http://www.openwall.com/lists/oss-security/2024/03/25/2 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/08/3 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/08/4 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/08/6 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/08/7 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/10/3 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/10/4 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/10/5 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/10/6 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/11/4 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/11/5 mailing list
• http://www.openwall.com/lists/oss-security/2024/04/11/6 mailing list
• https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 release notes
• https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html mailing list
• https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html mailing list