CVE-2017-1000383
published 2017-10-31CVE-2017-1000383: GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may…
PriorityP424medium5.5CVSS 3.0
AVLACLPRLUINSUCHINAN
EPSS
0.42%
34.5th percentile
GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | emacs | <= 25.3.0 | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
emacs: Ignores umask when creating a swap file
vendor_redhat·2017-10-31·CVSS 5.5
CVE-2017-1000383 [MEDIUM] CWE-266 emacs: Ignores umask when creating a swap file
emacs: Ignores umask when creating a swap file
GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.
It was found that emacs applies the opened file read permissions to the swap file, overriding the process' umask. An attacker might search for vim swap files, that were not deleted properly, in order to retrieve sensible data.
Statement: This flaw is an incorrect permission assignment, where the application ignores the user's umask setting when creating a backup file (e.g., filename~).This behavior is triggered during normal file-saving operations. On a multi-user system, this could all
GHSA
GHSA-7mwh-4vfp-mr6c: GNU Emacs version 25
ghsa_unreviewed·2022-05-17
CVE-2017-1000383 [MEDIUM] CWE-200 GHSA-7mwh-4vfp-mr6c: GNU Emacs version 25
GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.
OSV
CVE-2017-1000383: GNU Emacs version 25
osv·2017-10-31·CVSS 5.5
CVE-2017-1000383 [MEDIUM] CVE-2017-1000383: GNU Emacs version 25
GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-1000383 emacs: Ignores umask when creating a swap file
bugzilla·2017-11-02·CVSS 5.5
CVE-2017-1000383 [MEDIUM] CVE-2017-1000383 emacs: Ignores umask when creating a swap file
CVE-2017-1000383 emacs: Ignores umask when creating a swap file
GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.
References:
http://seclists.org/oss-sec/2017/q4/145
Discussion:
Created emacs tracking bugs for this issue:
Affects: fedora-all [bug 1508789]
---
It would be nice to have a reproducer in this bugzilla. Also, why is a vim discussion linked as a reference?
---
$ rpm -q emacs
emacs-25.3-3.fc26.x86_64
$ umask 077
$ echo hello > foo
$ ls -l foo*
-rw------- 1 jsynacek jsynacek 6 Nov 7 14:12 foo
$ emacs -Q foo &
[1] 2705
$ ls -l foo*
-rw------- 1 jsynacek jsynacek
Bugzilla
CVE-2017-1000383 emacs: Ignores umask when creating a swap file [fedora-all]
bugzilla·2017-11-02·CVSS 5.5
CVE-2017-1000383 [MEDIUM] CVE-2017-1000383 emacs: Ignores umask when creating a swap file [fedora-all]
CVE-2017-1000383 emacs: Ignores umask when creating a swap file [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions
2017-10-31
Published