CVE-2023-2491
EUVD-2023-3397517.05.2023, 22:15
A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gnu | emacs | 26.1-9.el8 |
| gnu | emacs | 27.2-8.el9 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux_eus | 8.8 |
| redhat | enterprise_linux_eus | 9.2 |
| redhat | enterprise_linux_server_aus | 8.8 |
| redhat | enterprise_linux_server_aus | 9.2 |
| redhat | enterprise_linux_server_tus | 8.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| emacs |
| ||||||||||||||
| emacs23 |
| ||||||||||||||
| emacs24 |
| ||||||||||||||
| emacs25 |
| ||||||||||||||
| xemacs21 |
| ||||||||||||||
| xemacs21-packages |
|
References