According to the versions of the emacs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    In elisp-mode.el in GNU Emacs before 30.1, a user who chooses to invoke elisp-completion-at-point (for     code completion) on untrusted Emacs Lisp source code can trigger unsafe Lisp macro expansion that allows     attackers to execute arbitrary code. (This unsafe expansion also occurs if a user chooses to enable on-     the-fly diagnosis that byte compiles untrusted Emacs Lisp source code.)(CVE-2024-53920)

    A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect.(CVE-2025-1244)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization emacs security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7922ff15ef advisory.

    Typo fix in test patch

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0199 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-1244:
    A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-1244 advisory.

  - A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated     attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking     users into visiting a specially crafted website or an HTTP URL with a redirect. (CVE-2025-1244)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1917 advisory.

    [1:26.1-13]
    - Fix man.el shell injection vulnerability (RHEL-79016)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5871 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5871-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     February 27, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : emacs     CVE ID         : CVE-2024-53920 CVE-2025-1244

    Two security vulnerabilities were discovered in Emacs:

    CVE-2024-53920

        Elisp byte-compilation ('elisp-flymake-byte-compile') in the Flymake         mode is now disabled for untrusted files.

    CVE-2025-1244

        An incomplete escaping of shell meta characters in the man reader         component could potentially result in the execution of arbitrary         shell commands. Discovered by Maxim Nikulin.

    For the stable distribution (bookworm), these problems have been fixed in     version 1:28.2+1-15+deb12u4.

    We recommend that you upgrade your emacs packages.

    For the detailed security status of emacs please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/emacs

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1915 advisory.

    [1:27.2-11.1]
    - Eliminate use of obsolete patch syntax (RHEL-80443)

    [1:27.2-11]
    - Fix man.el shell injection vulnerability (RHEL-79025)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:1963 advisory.

    GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing     features, a scripting language (elisp), and the capability to read e-mail and news.

    Security Fix(es):

    * emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme (CVE-2025-1244)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of emacs installed on the remote host is prior to 27.2-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2770 advisory.

    A flaw was found in the Emacs text editor. Improper handling of custom man URI schemes allows attackers     to execute arbitrary shell commands by tricking users into visiting a specially crafted website or an HTTP     URL with a redirect. (CVE-2025-1244)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
297371	EulerOS Virtualization 2.10.0 : emacs (EulerOS-SA-2026-1163)	Nessus	Huawei Local Security Checks	2026/1/31	2026/1/31	high
237880	Fedora 41 : emacs (2025-7922ff15ef)	Nessus	Fedora Local Security Checks	2025/6/6	2025/6/6	high
239474	TencentOS Server 3: emacs (TSSA-2025:0199)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
216624	CBL Mariner 2.0 Security Update: emacs (CVE-2025-1244)	Nessus	MarinerOS Local Security Checks	2025/2/21	2025/2/21	high
216918	Oracle Linux 8 : emacs (ELSA-2025-1917)	Nessus	Oracle Linux Local Security Checks	2025/2/27	2025/9/11	high
216930	Debian dsa-5871 : emacs - security update	Nessus	Debian Local Security Checks	2025/2/28	2025/9/26	high
216950	Oracle Linux 9 : emacs (ELSA-2025-1915)	Nessus	Oracle Linux Local Security Checks	2025/3/1	2025/9/11	high
216987	RHEL 8 : emacs (RHSA-2025:1963)	Nessus	Red Hat Local Security Checks	2025/3/3	2025/6/5	high
232355	Amazon Linux 2 : emacs (ALAS-2025-2770)	Nessus	Amazon Linux Local Security Checks	2025/3/10	2025/3/10	high

检测

插件搜索

high

high

high

high

high

high

high

high

high