read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords.
> AFFECTED_PRODUCTS
GNU - Emacs
Version: 20.0
GNU - Emacs
Version: 20.1
GNU - Emacs
Version: 20.2
GNU - Emacs
Version: 20.3
GNU - Emacs
Version: 20.4
GNU - Emacs
Version: 20.5
GNU - Emacs
Version: 20.6
> HISTORIQUE DES MODIFICATIONS
Première apparition
18/04/2000 04:00
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 14:00
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 1 year ago