CVE catalog
CVE-2017-1000383
UBUNTU-CVE-2017-1000383
- Severity
- Medium · CVSS 5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.42% · Oct 25, 2026
GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | emacs24 | pro | 24.5+1-1ubuntu2 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-1ubuntu4 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-1ubuntu5 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-1ubuntu6 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-1ubuntu7 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-6ubuntu1 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-6ubuntu1.1 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-6ubuntu1.1+esm1 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-6ubuntu1.1+esm2 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-6ubuntu1.1+esm3 | vulnerable |
| Ubuntu | emacs24 | pro | 24.5+1-6ubuntu1.1+esm4 | vulnerable |
| Ubuntu | emacs25 | pro | 25.2+1-6 | vulnerable |
| Ubuntu | emacs25 | pro | 25.2+1-6ubuntu0.1~esm2 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: