9.8

CVE-2024-39331: gnu emacs Code Injection

CVSS: 9.8v3.1CriticalAnalyzed
AliasesMGASA-2024-0276SUSE-SU-2024:2293-1SUSE-SU-2024:2567-1
Published 23-06-2024Last modified 22-08-2024
Open JSON

Vulnerability summary

CVE-2024-39331 is a critical (CVSS 9.8) Code Injection vulnerability in gnu emacs. EPSS estimates a 1.32% chance of exploitation in the next 30 days, higher than 70.5% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
1.32%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 3
RHSA-2024:6987SUSE-SU-2024:2297-1USN-7027-1USN-7375-1

Timeline

  1. 23-06-2024
    PublishedVulnerability first disclosed.
  2. 22-08-2024
    Last modifiedVulnerability information updated.

Description

In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

1.32%

Chance of exploitation in the next 30 days

Percentile

71%

Versus all other CVEs

30-day change

0.00 pp

From 1.32% on 20-09-2026

20-09-202620-10-2026
EPSS score
1.32%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse12 products
  • emacs&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 27.2-150400.3.17.1
  • emacs&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 27.2-150400.3.17.1
  • emacs&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5< 27.2-150400.3.17.1
  • emacs&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6< 27.2-150400.3.17.1
  • emacs&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP5< 27.2-150400.3.17.1
Redhat11 products
  • emacs< 1:26.1-7.el8_6.5 | < 1:26.1-10.el8_8.6 | < 1:27.2-10.el9_4
  • emacs-common< 1:26.1-7.el8_6.5 | < 1:26.1-10.el8_8.6 | < 1:27.2-10.el9_4
  • emacs-common-debuginfo< 1:26.1-7.el8_6.5 | < 1:26.1-10.el8_8.6 | < 1:27.2-10.el9_4
  • emacs-debuginfo< 1:26.1-7.el8_6.5 | < 1:26.1-10.el8_8.6 | < 1:27.2-10.el9_4
  • emacs-debugsource< 1:26.1-7.el8_6.5 | < 1:26.1-10.el8_8.6 | < 1:27.2-10.el9_4
Ubuntu6 products
  • emacs< 1:26.3+1-1ubuntu2+esm1 | < 1:27.1+1-3ubuntu5.2 | < 1:29.3+1-1ubuntu2+esm1
  • emacs24< 24.5+1-6ubuntu1.1+esm4
  • emacs25< 25.2+1-6ubuntu0.1~esm2
  • org-mode< 8.3.3-2ubuntu0.1~esm1 | < 9.1.6+dfsg-1ubuntu0.1~esm1 | < 9.3.1+dfsg-1ubuntu0.1~esm1 | < 9.5.2+dfsh-4ubuntu0.1~esm1 | < 9.6.10+dfsg-1ubuntu0.1~esm1
  • xemacs21All versions (No fix recorded)
Opensuse5 products
  • emacs&distro=openSUSE Leap 15.5< 27.2-150400.3.17.1
  • emacs&distro=openSUSE Leap 15.6< 27.2-150400.3.17.1
  • emacs&distro=openSUSE Tumbleweed< 29.4-2.1
  • syft&distro=openSUSE Leap 16.0< 1.45.0-bp160.1.1
  • syft&distro=openSUSE Tumbleweed< 1.42.1-1.1
Debian2 products
  • emacs< 1:29.4+1-1 | < 1:27.1+1-3.1+deb11u5 | < 1:28.2+1-15+deb12u3 | < 1:26.1+1-3.2+deb10u6
  • org-modeAll versions (No fix recorded) | < 9.7.5+dfsg-1 | < 9.4.0+dfsg-1+deb11u3 | < 9.1.14+dfsg-3+deb10u3
Gnu1 product
Mageia1 product
  • emacs< 29.4-1.mga9

7 vendors · 38 products

References

32 links
Show all 32 references