Wind River Support Network

HomeDefectsLIN1019-9592
Not to be fixed

LIN1019-9592 : Security Advisory - emacs - CVE-2023-28617

Created: Mar 19, 2023    Updated: Mar 20, 2023
Resolved Date: Mar 20, 2023
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters.

CREATE(Triage):(User=admin) CVE-2023-28617 (https://nvd.nist.gov/vuln/detail/CVE-2023-28617)
  • Linkedin
  • Facebook
  • Twitter
  • Youtube