CVE-2024-30203: gnu emacs – CVSS 5.5 · Watchpost

← All vulnerabilities

CVE-2024-30203

中危 5.5CVE-2024-30203 · Published 25/03/2024 · updated 17/06/2026

要点

CVE-2024-30203 是影响 emacs (gnu), org mode (gnu) 的中危 (CVSS 5.5)漏洞。
未来 30 天内被利用的概率（EPSS）：0.58%，高于 47.7% 的漏洞。
修复：升级到 29.3, 9.6.23 或更高版本。

Package	Affected versions	Patched versions
emacs gnu	`< 29.3`	`29.3`
org mode gnu	`< 9.6.23`	`9.6.23`

Description

In Emacs before 29.3, Gnus treats inline MIME contents as trusted.

References

openwall.com/lists/oss-security/2024/03/25/2 · Mailing List
openwall.com/lists/oss-security/2024/04/08/3 · Mailing List
openwall.com/lists/oss-security/2024/04/08/4 · Mailing List
openwall.com/lists/oss-security/2024/04/08/6 · Mailing List
openwall.com/lists/oss-security/2024/04/08/7 · Mailing List
openwall.com/lists/oss-security/2024/04/10/3 · Mailing List
openwall.com/lists/oss-security/2024/04/10/4 · Mailing List
openwall.com/lists/oss-security/2024/04/10/5 · Mailing List
openwall.com/lists/oss-security/2024/04/10/6 · Mailing List
openwall.com/lists/oss-security/2024/04/11/4 · Mailing List
openwall.com/lists/oss-security/2024/04/11/5 · Mailing List
openwall.com/lists/oss-security/2024/04/11/6 · Mailing List
git.savannah.gnu.org/cgit/emacs.git/commit · Patch
git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS · Release Notes
lists.debian.org/debian-lts-announce/2024/04/msg00023.html · Mailing List
lists.debian.org/debian-lts-announce/2024/04/msg00024.html · Mailing List

emacs 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free