org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7027-1 advisory.

    It was discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this     issue to execute arbitrary commands. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and     Ubuntu 22.04 LTS. (CVE-2022-45939)

    Xi Lu discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this     issue to execute arbitrary commands. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu     20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-48337)

    Xi Lu discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this     issue to execute arbitrary commands. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-48338)

    Xi Lu discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this     issue to execute arbitrary commands. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and     Ubuntu 22.04 LTS. (CVE-2022-48339)

    It was discovered that Emacs incorrectly handled filename sanitization. An attacker could possibly use     this issue to execute arbitrary commands. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and     Ubuntu 22.04 LTS. (CVE-2023-28617)

    It was discovered that Emacs incorrectly handled certain crafted files. An attacker could possibly use     this issue to crash the program, resulting in a denial of service. This issue only affected Ubuntu 16.04     LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-30203, CVE-2024-30204,     CVE-2024-30205)

    It was discovered that Emacs incorrectly handled certain crafted files. An attacker could possibly use     this issue to execute arbitrary commands. (CVE-2024-39331)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:1930 advisory.

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the emacs package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3616 advisory.

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a     source-code file, because lib-src/etags.c uses the system C library function in its implementation of the     etags program. For example, a victim may use the 'etags -u *' command (suggested in the etags     documentation) in a situation where the current working directory has contents that depend on untrusted     input. (CVE-2022-48337)

  - An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function     has a local command injection vulnerability. The ruby-find-library-file function is an interactive     function, and bound to C-c C-f. Inside the function, the external command gem is called through shell-     command-to-string, but the feature-name parameters are not escaped. Thus, malicious Ruby source files may     cause commands to be executed. (CVE-2022-48338)

  - An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability.
    In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and     parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be     executed. (CVE-2022-48339)

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3189 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: command injection vulnerability in org-mode (CVE-2023-28617)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3416 advisory.

  - GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a     source-code file, because lib-src/etags.c uses the system C library function in its implementation of the     etags program. For example, a victim may use the etags -u * command (suggested in the etags     documentation) in a situation where the current working directory has contents that depend on untrusted     input. (CVE-2022-48337)

  - An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability.
    In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and     parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be     executed. (CVE-2022-48339)

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:2074 advisory.

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:2074 advisory.

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2074 advisory.

    [1:27.2-6.1]
    - Fix ob-latex.el command injection vulnerability (#2180589)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2074 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: command injection vulnerability in org-mode (CVE-2023-28617)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:1930 advisory.

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:2010 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: command injection vulnerability in org-mode (CVE-2023-28617)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1958 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: command injection vulnerability in org-mode (CVE-2023-28617)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1931 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: command injection vulnerability in org-mode (CVE-2023-28617)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1930 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: command injection vulnerability in org-mode (CVE-2023-28617)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:1930 advisory.

  - org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1930 advisory.

    [1:26.1-7.1]
    - Fix ob-latex.el command injection vulnerability (#2180585)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1915 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: command injection vulnerability in org-mode (CVE-2023-28617)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2012 advisory.

    org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6003-1 advisory.

    Xi Lu discovered that Emacs did not properly handle certain inputs. An attacker could possibly use this     issue to execute arbitrary commands.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-147 advisory.

    org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute     arbitrary commands via a file name or directory name that contains shell metacharacters. (CVE-2023-28617)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
207478	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Emacs vulnerabilities (USN-7027-1)	Nessus	Ubuntu Local Security Checks	critical
190163	CentOS 8 : emacs (CESA-2023:1930)	Nessus	CentOS Local Security Checks	high
188550	EulerOS Virtualization 2.11.0 : emacs (EulerOS-SA-2023-2752)	Nessus	Huawei Local Security Checks	high
188539	EulerOS 2.0 SP11 : emacs (EulerOS-SA-2023-2639)	Nessus	Huawei Local Security Checks	high
188197	EulerOS 2.0 SP11 : emacs (EulerOS-SA-2023-2681)	Nessus	Huawei Local Security Checks	high
188087	EulerOS Virtualization 2.11.1 : emacs (EulerOS-SA-2023-2721)	Nessus	Huawei Local Security Checks	high
182961	Debian DLA-3616-1 : org-mode - LTS security update	Nessus	Debian Local Security Checks	high
179019	EulerOS Virtualization 2.10.0 : emacs (EulerOS-SA-2023-2486)	Nessus	Huawei Local Security Checks	critical
179010	EulerOS Virtualization 2.10.1 : emacs (EulerOS-SA-2023-2461)	Nessus	Huawei Local Security Checks	critical
175982	RHEL 8 : emacs (RHSA-2023:3189)	Nessus	Red Hat Local Security Checks	high
175551	Debian DLA-3416-1 : emacs - LTS security update	Nessus	Debian Local Security Checks	critical
175319	EulerOS 2.0 SP10 : emacs (EulerOS-SA-2023-1801)	Nessus	Huawei Local Security Checks	high
175291	EulerOS 2.0 SP10 : emacs (EulerOS-SA-2023-1819)	Nessus	Huawei Local Security Checks	high
175145	Rocky Linux 9 : emacs (RLSA-2023:2074)	Nessus	Rocky Linux Local Security Checks	high
175031	AlmaLinux 9 : emacs (ALSA-2023:2074)	Nessus	Alma Linux Local Security Checks	high
175008	Oracle Linux 9 : emacs (ELSA-2023-2074)	Nessus	Oracle Linux Local Security Checks	high
174998	RHEL 9 : emacs (RHSA-2023:2074)	Nessus	Red Hat Local Security Checks	high
174809	Rocky Linux 8 : emacs (RLSA-2023:1930)	Nessus	Rocky Linux Local Security Checks	high
174754	RHEL 9 : emacs (RHSA-2023:2010)	Nessus	Red Hat Local Security Checks	high
174731	RHEL 8 : emacs (RHSA-2023:1958)	Nessus	Red Hat Local Security Checks	high
174692	RHEL 8 : emacs (RHSA-2023:1931)	Nessus	Red Hat Local Security Checks	high
174691	RHEL 8 : emacs (RHSA-2023:1930)	Nessus	Red Hat Local Security Checks	high
174682	AlmaLinux 8 : emacs (ALSA-2023:1930)	Nessus	Alma Linux Local Security Checks	high
174678	Oracle Linux 8 : emacs (ELSA-2023-1930)	Nessus	Oracle Linux Local Security Checks	high
174588	RHEL 8 : emacs (RHSA-2023:1915)	Nessus	Red Hat Local Security Checks	high
174577	Amazon Linux 2 : emacs (ALAS-2023-2012)	Nessus	Amazon Linux Local Security Checks	high
174006	Ubuntu 16.04 ESM : Emacs vulnerability (USN-6003-1)	Nessus	Ubuntu Local Security Checks	high
173842	Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2023-147)	Nessus	Amazon Linux Local Security Checks	high

Detections

Analytics

CVE-2023-28617

high

Tenable Plugins

critical

high

high

high

high

high

high

critical

critical

high

critical

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high