{"schemaVersion":3,"id":"USN-7027-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"emacs, emacs24, emacs25 vulnerabilities\n\nIt was discovered that Emacs incorrectly handled input sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04\nLTS. (CVE-2022-45939)\n\nXi Lu discovered that Emacs incorrectly handled input sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS\nand Ubuntu 22.04 LTS. (CVE-2022-48337)\n\nXi Lu discovered that Emacs incorrectly handled input sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 22.04 LTS. (CVE-2022-48338)\n\nXi Lu discovered that Emacs incorrectly handled input sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04\nLTS. (CVE-2022-48339)\n\nIt was discovered that Emacs incorrectly handled filename sanitization. An\nattacker could possibly use this issue to execute arbitrary commands. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04\nLTS. (CVE-2023-28617)\n\nIt was discovered that Emacs incorrectly handled certain crafted files. An\nattacker could possibly use this issue to crash the program, resulting in\na denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-30203,\nCVE-2024-30204, CVE-2024-30205)\n\nIt was discovered that Emacs incorrectly handled certain crafted files. An\nattacker could possibly use this issue to execute arbitrary commands.\n(CVE-2024-39331)","dates":{"published":"2024-09-19T17:16:05.000Z","modified":"2026-06-25T13:32:29.065Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"emacs","name":"emacs","label":"emacs","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/emacs","purlType":"deb","versions":[{"text":"< 1:26.3+1-1ubuntu2+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:27.1+1-3ubuntu5.2","noFixRecorded":false,"fixedIn":null},{"text":"< 1:29.3+1-1ubuntu2+esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:26.3+1-1ubuntu2+esm1 | < 1:27.1+1-3ubuntu5.2 | < 1:29.3+1-1ubuntu2+esm1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"emacs24","name":"emacs24","label":"emacs24","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/emacs24","purlType":"deb","versions":[{"text":"< 24.5+1-6ubuntu1.1+esm4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.5+1-6ubuntu1.1+esm4","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"emacs25","name":"emacs25","label":"emacs25","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/emacs25","purlType":"deb","versions":[{"text":"< 25.2+1-6ubuntu0.1~esm2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.2+1-6ubuntu0.1~esm2","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7027-1","label":"ubuntu.com/security/notices/USN-7027-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-45939","label":"ubuntu.com/security/CVE-2022-45939","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-48337","label":"ubuntu.com/security/CVE-2022-48337","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-48338","label":"ubuntu.com/security/CVE-2022-48338","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-48339","label":"ubuntu.com/security/CVE-2022-48339","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2023-28617","label":"ubuntu.com/security/CVE-2023-28617","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-30203","label":"ubuntu.com/security/CVE-2024-30203","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-30204","label":"ubuntu.com/security/CVE-2024-30204","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-30205","label":"ubuntu.com/security/CVE-2024-30205","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2024-39331","label":"ubuntu.com/security/CVE-2024-39331","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://launchpad.net/bugs/2070418","label":"launchpad.net/bugs/2070418","hostname":"launchpad.net","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2022-45939","CVE-2022-48337","CVE-2022-48338","CVE-2022-48339","CVE-2023-28617","CVE-2024-30203","CVE-2024-30204","CVE-2024-30205","CVE-2024-39331"],"downstream":[],"duplicates":[],"related":["CVE-2022-45939","CVE-2022-48337","CVE-2022-48338","CVE-2022-48339","CVE-2023-28617","CVE-2024-30203","CVE-2024-30204","CVE-2024-30205","CVE-2024-39331"]},"timeline":[{"kind":"published","date":"2024-09-19T17:16:05.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-25T13:32:29.065Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T05:26:07.122Z","stale":false,"partial":false}}