CVE-2024-30203

MEDIUMMonitor

Published:Mar 25, 2024(2 years ago)

Modified:May 1, 2025

Local AccessNo Auth RequiredLow Complexity

Vulnerability Description

In Emacs before 29.3, Gnus treats inline MIME contents as trusted.

Local AccessLow ComplexityNo Auth NeededUser Interaction Required

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Vendor	Product	Versions	Fixed In
gnu	emacs	29.3	-
gnu	org_mode	9.6.23	-
debian	debian_linux	-

v3.1

5.5/ 10.0

MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

References

gnu / emacs

http://www.openwall.com/lists/oss-security/2024/04/08/6Mailing List

http://www.openwall.com/lists/oss-security/2024/04/08/7Mailing List

http://www.openwall.com/lists/oss-security/2024/04/10/3Mailing List

http://www.openwall.com/lists/oss-security/2024/04/10/4Mailing List

http://www.openwall.com/lists/oss-security/2024/04/10/5Mailing List

http://www.openwall.com/lists/oss-security/2024/04/10/6Mailing List

http://www.openwall.com/lists/oss-security/2024/04/11/4Mailing List

http://www.openwall.com/lists/oss-security/2024/04/11/5Mailing List

http://www.openwall.com/lists/oss-security/2024/04/11/6Mailing List

https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=937b...Patch

https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29Release Notes

https://lists.debian.org/debian-lts-announce/2024/04/msg00023.htmlMailing List

https://lists.debian.org/debian-lts-announce/2024/04/msg00024.htmlMailing List

http://www.openwall.com/lists/oss-security/2024/03/25/2Mailing List

http://www.openwall.com/lists/oss-security/2024/04/08/3Mailing List

http://www.openwall.com/lists/oss-security/2024/04/08/4Mailing List