CVE-2024-30203
emacs: Gnus treats inline MIME contents as trusted
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 25, 2024
Updated · October 31, 2026
Description
A flaw was found in Emacs. When Emacs is used as an email client, inline MIME attachments are considered to be trusted by default, allowing a crafted LaTeX document to exhaust the disk space or the inodes allocated for the partition where the /tmp directory is located. This issue possibly results in a denial of service.
Statement
This issue is very similar to CVE-2024-30204. See https://access.redhat.com/security/cve/CVE-2024-30204.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Do not open emails from untrusted sources.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-349 · Acceptance of Extraneous Untrusted Data With Trusted Data