CVE-2000-0269 Affecting emacs package, versions [20.0,20.6]


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.05% (18th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-EMACS-2370935
  • published26 Jan 2022
  • disclosed18 Apr 2000
  • creditUnknown

Introduced: 18 Apr 2000

CVE-2000-0269  (opens in a new tab)

How to fix?

There is no fixed version for emacs.

Overview

Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.

References

CVSS Scores

version 3.1