cbcvebase.
CVE-2022-48337
published 2023-02-20

CVE-2022-48337: GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system…

PriorityP347critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.60%
73.1th percentile
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u *" command (suggested in the etags documentation) in a situation where the current working directory has contents that depend on untrusted input.

Affected

13 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debianemacs< emacs 1:28.2+1-11 (bookworm)emacs 1:28.2+1-11 (bookworm)
gnuemacs<= 28.2
gnuemacs>= 0 < 1:27.1+1-3.1+deb11u21:27.1+1-3.1+deb11u2
gnuemacs>= 0 < 1:28.2+1-111:28.2+1-11
gnuemacs>= 0 < 1:28.2+1-111:28.2+1-11
gnuemacs>= 0 < 1:28.2+1-111:28.2+1-11
gnuemacs>= 0 < 1:27.1+1-3ubuntu5.21:27.1+1-3ubuntu5.2
gnuemacs>= 0 < 1:26.3+1-1ubuntu2+esm11:26.3+1-1ubuntu2+esm1
gnuemacs>= 0 < 1:29.3+1-1ubuntu2+esm11:29.3+1-1ubuntu2+esm1
msrccbl2_emacs_28.2-4_on_cbl_mariner_2.0
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_msrc9.8CRITICAL
vendor_redhat9.8CRITICAL
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.