CVE-2024-39331 - Vulnerability Details

Vendors	Products
Gnu	Emacs
Redhat	Enterprise Linux Rhel Aus Rhel E4s Rhel Eus Rhel Tus

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 8
emacs-1:26.1-12.el8_10	cpe:/a:redhat:enterprise_linux:8	RHSA-2024:6987	2024-09-24T00:00:00Z
emacs-1:26.1-12.el8_10	cpe:/o:redhat:enterprise_linux:8	RHSA-2024:6987	2024-09-24T00:00:00Z
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
emacs-1:26.1-7.el8_6.5	cpe:/a:redhat:rhel_aus:8.6	RHSA-2024:4971	2024-08-01T00:00:00Z
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
emacs-1:26.1-7.el8_6.5	cpe:/a:redhat:rhel_tus:8.6	RHSA-2024:4971	2024-08-01T00:00:00Z
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
emacs-1:26.1-7.el8_6.5	cpe:/a:redhat:rhel_e4s:8.6	RHSA-2024:4971	2024-08-01T00:00:00Z
Red Hat Enterprise Linux 8.8 Extended Update Support
emacs-1:26.1-10.el8_8.6	cpe:/a:redhat:rhel_eus:8.8	RHSA-2024:6203	2024-09-03T00:00:00Z
Red Hat Enterprise Linux 9
emacs-1:27.2-10.el9_4	cpe:/a:redhat:enterprise_linux:9	RHSA-2024:6510	2024-09-09T00:00:00Z

Link	Providers
https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29
https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8
https://list.orgmode.org/87sex5gdqc.fsf%40localhost/
https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html
https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html
https://news.ycombinator.com/item?id=40768225
https://nvd.nist.gov/vuln/detail/CVE-2024-39331
https://www.cve.org/CVERecord?id=CVE-2024-39331
https://www.openwall.com/lists/oss-security/2024/06/23/1
https://www.openwall.com/lists/oss-security/2024/06/23/2

Type	Values Removed	Values Added
First Time appeared		Gnu Gnu emacs
CPEs		cpe:2.3:a:gnu:emacs::::::::
Vendors & Products		Gnu Gnu emacs

Type	Values Removed	Values Added
CPEs		cpe:/a:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:8

Type	Values Removed	Values Added
First Time appeared		Redhat enterprise Linux
CPEs		cpe:/a:redhat:enterprise_linux:9
Vendors & Products		Redhat enterprise Linux

Type	Values Removed	Values Added
First Time appeared		Redhat rhel Eus
CPEs		cpe:/a:redhat:rhel_eus:8.8
Vendors & Products		Redhat rhel Eus

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-39331", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-22T03:55:10.601Z", "dateReserved": "2024-06-23T00:00:00", "datePublished": "2024-06-23T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-06-29T07:06:02.248894"}, "descriptions": [{"lang": "en", "value": "In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29"}, {"url": "https://list.orgmode.org/87sex5gdqc.fsf%40localhost/"}, {"url": "https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html"}, {"url": "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8"}, {"url": "https://www.openwall.com/lists/oss-security/2024/06/23/1"}, {"url": "https://www.openwall.com/lists/oss-security/2024/06/23/2"}, {"url": "https://news.ycombinator.com/item?id=40768225"}, {"name": "[debian-lts-announce] 20240629 [SECURITY] [DLA 3848-1] org-mode security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html"}, {"name": "[debian-lts-announce] 20240629 [SECURITY] [DLA 3849-1] org-mode security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-94", "lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "affected": [{"vendor": "gnu", "product": "emacs", "cpes": ["cpe:2.3:a:gnu:emacs:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "29.4", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-08-21T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-39331"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-22T03:55:10.601Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:26:14.279Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29", "tags": ["x_transferred"]}, {"url": "https://list.orgmode.org/87sex5gdqc.fsf%40localhost/", "tags": ["x_transferred"]}, {"url": "https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html", "tags": ["x_transferred"]}, {"url": "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8", "tags": ["x_transferred"]}, {"url": "https://www.openwall.com/lists/oss-security/2024/06/23/1", "tags": ["x_transferred"]}, {"url": "https://www.openwall.com/lists/oss-security/2024/06/23/2", "tags": ["x_transferred"]}, {"url": "https://news.ycombinator.com/item?id=40768225", "tags": ["x_transferred"]}, {"name": "[debian-lts-announce] 20240629 [SECURITY] [DLA 3848-1] org-mode security update", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html"}, {"name": "[debian-lts-announce] 20240629 [SECURITY] [DLA 3849-1] org-mode security update", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html"}]}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2024-39331 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2024-08-22T03:55:10.601Z (string)

dateReserved : 2024-06-23T00:00:00 (string)

datePublished : 2024-06-23T00:00:00 (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-06-29T07:06:02.248894 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 (string)

}

1 : { »

url : https://list.orgmode.org/87sex5gdqc.fsf%40localhost/ (string)

}

2 : { »

url : https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html (string)

}

3 : { »

url : https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8 (string)

}

4 : { »

url : https://www.openwall.com/lists/oss-security/2024/06/23/1 (string)

}

5 : { »

url : https://www.openwall.com/lists/oss-security/2024/06/23/2 (string)

}

6 : { »

url : https://news.ycombinator.com/item?id=40768225 (string)

}

7 : { »

name : [debian-lts-announce] 20240629 [SECURITY] [DLA 3848-1] org-mode security update (string)

tags : [ »

0 : mailing-list (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html (string)

}

8 : { »

name : [debian-lts-announce] 20240629 [SECURITY] [DLA 3849-1] org-mode security update (string)

tags : [ »

0 : mailing-list (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-94 (string)

lang : en (string)

description : CWE-94 Improper Control of Generation of Code ('Code Injection') (string)

}

]

}

]

affected : [ »

0 : { »

vendor : gnu (string)

product : emacs (string)

cpes : [ »

0 : cpe:2.3:a:gnu:emacs:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 29.4 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-08-21T00:00:00+00:00 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

id : CVE-2024-39331 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-22T03:55:10.601Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T04:26:14.279Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://list.orgmode.org/87sex5gdqc.fsf%40localhost/ (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8 (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://www.openwall.com/lists/oss-security/2024/06/23/1 (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://www.openwall.com/lists/oss-security/2024/06/23/2 (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://news.ycombinator.com/item?id=40768225 (string)

tags : [ »

0 : x_transferred (string)

]

}

7 : { »

name : [debian-lts-announce] 20240629 [SECURITY] [DLA 3848-1] org-mode security update (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html (string)

}

8 : { »

name : [debian-lts-announce] 20240629 [SECURITY] [DLA 3849-1] org-mode security update (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html (string)

}

]

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29", "tags": ["x_transferred"]}, {"url": "https://list.orgmode.org/87sex5gdqc.fsf%40localhost/", "tags": ["x_transferred"]}, {"url": "https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html", "tags": ["x_transferred"]}, {"url": "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8", "tags": ["x_transferred"]}, {"url": "https://www.openwall.com/lists/oss-security/2024/06/23/1", "tags": ["x_transferred"]}, {"url": "https://www.openwall.com/lists/oss-security/2024/06/23/2", "tags": ["x_transferred"]}, {"url": "https://news.ycombinator.com/item?id=40768225", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html", "name": "[debian-lts-announce] 20240629 [SECURITY] [DLA 3848-1] org-mode security update", "tags": ["mailing-list", "x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html", "name": "[debian-lts-announce] 20240629 [SECURITY] [DLA 3849-1] org-mode security update", "tags": ["mailing-list", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:26:14.279Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-39331", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-07-01T21:24:13.633677Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:gnu:emacs:-:*:*:*:*:*:*:*"], "vendor": "gnu", "product": "emacs", "versions": [{"status": "affected", "version": "0", "lessThan": "29.4", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-01T21:32:02.854Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29"}, {"url": "https://list.orgmode.org/87sex5gdqc.fsf%40localhost/"}, {"url": "https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html"}, {"url": "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8"}, {"url": "https://www.openwall.com/lists/oss-security/2024/06/23/1"}, {"url": "https://www.openwall.com/lists/oss-security/2024/06/23/2"}, {"url": "https://news.ycombinator.com/item?id=40768225"}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html", "name": "[debian-lts-announce] 20240629 [SECURITY] [DLA 3848-1] org-mode security update", "tags": ["mailing-list"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html", "name": "[debian-lts-announce] 20240629 [SECURITY] [DLA 3849-1] org-mode security update", "tags": ["mailing-list"]}], "descriptions": [{"lang": "en", "value": "In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-06-29T07:06:02.248894"}}}, "cveMetadata": {"cveId": "CVE-2024-39331", "state": "PUBLISHED", "dateUpdated": "2024-08-22T03:55:10.601Z", "dateReserved": "2024-06-23T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-06-23T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://list.orgmode.org/87sex5gdqc.fsf%40localhost/ (string)

tags : [ »

0 : x_transferred (string)

]

}

2 : { »

url : https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8 (string)

tags : [ »

0 : x_transferred (string)

]

}

4 : { »

url : https://www.openwall.com/lists/oss-security/2024/06/23/1 (string)

tags : [ »

0 : x_transferred (string)

]

}

5 : { »

url : https://www.openwall.com/lists/oss-security/2024/06/23/2 (string)

tags : [ »

0 : x_transferred (string)

]

}

6 : { »

url : https://news.ycombinator.com/item?id=40768225 (string)

tags : [ »

0 : x_transferred (string)

]

}

7 : { »

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html (string)

name : [debian-lts-announce] 20240629 [SECURITY] [DLA 3848-1] org-mode security update (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

}

8 : { »

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html (string)

name : [debian-lts-announce] 20240629 [SECURITY] [DLA 3849-1] org-mode security update (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T04:26:14.279Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-39331 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-07-01T21:24:13.633677Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:gnu:emacs:-:*:*:*:*:*:*:* (string)

]

vendor : gnu (string)

product : emacs (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 29.4 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-94 (string)

description : CWE-94 Improper Control of Generation of Code ('Code Injection') (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-07-01T21:32:02.854Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

references : [ »

0 : { »

url : https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 (string)

}

1 : { »

url : https://list.orgmode.org/87sex5gdqc.fsf%40localhost/ (string)

}

2 : { »

url : https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html (string)

}

3 : { »

url : https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8 (string)

}

4 : { »

url : https://www.openwall.com/lists/oss-security/2024/06/23/1 (string)

}

5 : { »

url : https://www.openwall.com/lists/oss-security/2024/06/23/2 (string)

}

6 : { »

url : https://news.ycombinator.com/item?id=40768225 (string)

}

7 : { »

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html (string)

name : [debian-lts-announce] 20240629 [SECURITY] [DLA 3848-1] org-mode security update (string)

tags : [ »

0 : mailing-list (string)

]

}

8 : { »

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html (string)

name : [debian-lts-announce] 20240629 [SECURITY] [DLA 3849-1] org-mode security update (string)

tags : [ »

0 : mailing-list (string)

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : n/a (string)

}

]

}

]

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2024-06-29T07:06:02.248894 (string)

}

cveMetadata : { »

cveId : CVE-2024-39331 (string)

state : PUBLISHED (string)

dateUpdated : 2024-08-22T03:55:10.601Z (string)

dateReserved : 2024-06-23T00:00:00 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

datePublished : 2024-06-23T00:00:00 (string)

assignerShortName : mitre (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*", "matchCriteriaId": "A2FCE1A3-09E0-4700-91DE-AD79D3B2FAA8", "versionEndExcluding": "29.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5."}, {"lang": "es", "value": "En Emacs anterior a 29.4, org-link-expand-abbrev en lisp/ol.el expande una abreviatura de enlace %(...) incluso cuando especifica una funci\u00f3n no segura, como shell-command-to-string. Esto afecta al modo de organizaci\u00f3n anterior a 9.7.5."}], "id": "CVE-2024-39331", "lastModified": "2025-04-30T16:44:51.867", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-06-23T22:15:09.370", "references": [{"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Patch"], "url": "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8"}, {"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "https://list.orgmode.org/87sex5gdqc.fsf%40localhost/"}, {"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html"}, {"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html"}, {"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html"}, {"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "https://news.ycombinator.com/item?id=40768225"}, {"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "https://www.openwall.com/lists/oss-security/2024/06/23/1"}, {"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "https://www.openwall.com/lists/oss-security/2024/06/23/2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch"], "url": "https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://list.orgmode.org/87sex5gdqc.fsf%40localhost/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://news.ycombinator.com/item?id=40768225"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://www.openwall.com/lists/oss-security/2024/06/23/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "https://www.openwall.com/lists/oss-security/2024/06/23/2"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A2FCE1A3-09E0-4700-91DE-AD79D3B2FAA8 (string)

versionEndExcluding : 29.4 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5. (string)

}

1 : { »

lang : es (string)

value : En Emacs anterior a 29.4, org-link-expand-abbrev en lisp/ol.el expande una abreviatura de enlace %(...) incluso cuando especifica una función no segura, como shell-command-to-string. Esto afecta al modo de organización anterior a 9.7.5. (string)

}

]

id : CVE-2024-39331 (string)

lastModified : 2025-04-30T16:44:51.867 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-06-23T22:15:09.370 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Release Notes (string)

]

url : https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

1 : Patch (string)

]

url : https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8 (string)

}

2 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

]

url : https://list.orgmode.org/87sex5gdqc.fsf%40localhost/ (string)

}

3 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html (string)

}

4 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html (string)

}

5 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

]

url : https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html (string)

}

6 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

]

url : https://news.ycombinator.com/item?id=40768225 (string)

}

7 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

]

url : https://www.openwall.com/lists/oss-security/2024/06/23/1 (string)

}

8 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

]

url : https://www.openwall.com/lists/oss-security/2024/06/23/2 (string)

}

9 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Release Notes (string)

]

url : https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 (string)

}

10 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Patch (string)

]

url : https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=f4cc61636947b5c2f0afc67174dd369fe3277aa8 (string)

}

11 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : https://list.orgmode.org/87sex5gdqc.fsf%40localhost/ (string)

}

12 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00023.html (string)

}

13 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : https://lists.debian.org/debian-lts-announce/2024/06/msg00024.html (string)

}

14 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : https://lists.gnu.org/archive/html/info-gnu-emacs/2024-06/msg00000.html (string)

}

15 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : https://news.ycombinator.com/item?id=40768225 (string)

}

16 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : https://www.openwall.com/lists/oss-security/2024/06/23/1 (string)

}

17 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : https://www.openwall.com/lists/oss-security/2024/06/23/2 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-94 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Show plain JSON

{"affected_release": [{"advisory": "RHSA-2024:6987", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "emacs-1:26.1-12.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-09-24T00:00:00Z"}, {"advisory": "RHSA-2024:6987", "cpe": "cpe:/o:redhat:enterprise_linux:8", "package": "emacs-1:26.1-12.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-09-24T00:00:00Z"}, {"advisory": "RHSA-2024:4971", "cpe": "cpe:/a:redhat:rhel_aus:8.6", "package": "emacs-1:26.1-7.el8_6.5", "product_name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "release_date": "2024-08-01T00:00:00Z"}, {"advisory": "RHSA-2024:4971", "cpe": "cpe:/a:redhat:rhel_tus:8.6", "package": "emacs-1:26.1-7.el8_6.5", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2024-08-01T00:00:00Z"}, {"advisory": "RHSA-2024:4971", "cpe": "cpe:/a:redhat:rhel_e4s:8.6", "package": "emacs-1:26.1-7.el8_6.5", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2024-08-01T00:00:00Z"}, {"advisory": "RHSA-2024:6203", "cpe": "cpe:/a:redhat:rhel_eus:8.8", "package": "emacs-1:26.1-10.el8_8.6", "product_name": "Red Hat Enterprise Linux 8.8 Extended Update Support", "release_date": "2024-09-03T00:00:00Z"}, {"advisory": "RHSA-2024:6510", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "emacs-1:27.2-10.el9_4", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-09-09T00:00:00Z"}], "bugzilla": {"description": "emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code", "id": "2293942", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2293942"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.8", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-95", "details": ["In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.", "A flaw was found in Emacs. Arbitrary shell commands can be executed without prompting when an Org mode file is opened or when the Org mode is enabled, when Emacs is used as an email client, this issue can be triggered when previewing email attachments."], "mitigation": {"lang": "en:us", "value": "Do not open Org mode files or preview email attachments from untrusted sources."}, "name": "CVE-2024-39331", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "emacs", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "emacs", "product_name": "Red Hat Enterprise Linux 7"}], "public_date": "2024-06-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-39331\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-39331\nhttps://www.openwall.com/lists/oss-security/2024/06/23/1"], "statement": "To exploit this flaw, an attacker needs to trick a user into opening a crafted Org mode file or previewing a crafted email attachment. For this reason, this flaw has been rated with a Moderate security impact.", "threat_severity": "Moderate"}

{

affected_release : [ »

0 : { »

advisory : RHSA-2024:6987 (string)

cpe : cpe:/a:redhat:enterprise_linux:8 (string)

package : emacs-1:26.1-12.el8_10 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2024-09-24T00:00:00Z (string)

}

1 : { »

advisory : RHSA-2024:6987 (string)

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

package : emacs-1:26.1-12.el8_10 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2024-09-24T00:00:00Z (string)

}

2 : { »

advisory : RHSA-2024:4971 (string)

cpe : cpe:/a:redhat:rhel_aus:8.6 (string)

package : emacs-1:26.1-7.el8_6.5 (string)

product_name : Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (string)

release_date : 2024-08-01T00:00:00Z (string)

}

3 : { »

advisory : RHSA-2024:4971 (string)

cpe : cpe:/a:redhat:rhel_tus:8.6 (string)

package : emacs-1:26.1-7.el8_6.5 (string)

product_name : Red Hat Enterprise Linux 8.6 Telecommunications Update Service (string)

release_date : 2024-08-01T00:00:00Z (string)

}

4 : { »

advisory : RHSA-2024:4971 (string)

cpe : cpe:/a:redhat:rhel_e4s:8.6 (string)

package : emacs-1:26.1-7.el8_6.5 (string)

product_name : Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (string)

release_date : 2024-08-01T00:00:00Z (string)

}

5 : { »

advisory : RHSA-2024:6203 (string)

cpe : cpe:/a:redhat:rhel_eus:8.8 (string)

package : emacs-1:26.1-10.el8_8.6 (string)

product_name : Red Hat Enterprise Linux 8.8 Extended Update Support (string)

release_date : 2024-09-03T00:00:00Z (string)

}

6 : { »

advisory : RHSA-2024:6510 (string)

cpe : cpe:/a:redhat:enterprise_linux:9 (string)

package : emacs-1:27.2-10.el9_4 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2024-09-09T00:00:00Z (string)

}

]

bugzilla : { »

description : emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (string)

id : 2293942 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2293942 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 7.8 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

status : verified (string)

}

cwe : CWE-95 (string)

details : [ »

0 : In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5. (string)

1 : A flaw was found in Emacs. Arbitrary shell commands can be executed without prompting when an Org mode file is opened or when the Org mode is enabled, when Emacs is used as an email client, this issue can be triggered when previewing email attachments. (string)

]

mitigation : { »

lang : en:us (string)

value : Do not open Org mode files or preview email attachments from untrusted sources. (string)

}

name : CVE-2024-39331 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : emacs (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : emacs (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

]

public_date : 2024-06-23T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2024-39331 https://nvd.nist.gov/vuln/detail/CVE-2024-39331 https://www.openwall.com/lists/oss-security/2024/06/23/1 (string)

]

statement : To exploit this flaw, an attacker needs to trick a user into opening a crafted Org mode file or previewing a crafted email attachment. For this reason, this flaw has been rated with a Moderate security impact. (string)

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object