yocto ▾
›
scarthgap ▾
›
vulnerability
›
CVE-2024-30205
Component Overview
Vulnerability Overview
Name
CVE-2024-30205
Source
NVD (
link
)
Debian (
link
)
Description
In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.
CWEs
CWE-494
Published Date
Mar 25, 2024
Updated Date
Jun 17, 2026
Workaround
-
Advisories
http://www.openwall.com/lists/oss-security/2024/03/25/2
Mailing List
https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877
Patch
https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29
Release Notes
https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=4255d5dcc0657915f90e4fba7e0a5514cced514d
Patch
https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html
Mailing List
https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html
Mailing List
http://www.openwall.com/lists/oss-security/2024/03/25/2
Mailing List
https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=2bc865ace050ff118db43f01457f95f95112b877
Patch
https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29
Release Notes
https://git.savannah.gnu.org/cgit/emacs/org-mode.git/commit/?id=4255d5dcc0657915f90e4fba7e0a5514cced514d
Patch
https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html
Mailing List
https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html
Mailing List
Analysis
#
Affected Component
Analysis
emacs
Exploitable
Vulnerability Ratings
#
7.1
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
emacs
yocto
kirkstone
27.2
Exploitable
emacs
yocto
master
30.2
Not Affected