autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-drive-menuUpgrade accountsserviceUpgrade gnome-control-centerUpgrade gnome-calculatorUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-autoarUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3Upgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-gesture-inhibitorUpgrade LibRawUpgrade gnome-session-wayland-sessionUpgrade gnome-online-accountsUpgrade webkit2gtk3-jsc-develUpgrade mutterUpgrade gtk3-develUpgrade gnome-shell-extension-window-grouperUpgrade gnome-sessionUpgrade webkit2gtk3Upgrade gnome-session-kiosk-sessionUpgrade accountsservice-develUpgrade webkit2gtk3-jscUpgrade gnome-softwareUpgrade gnome-shellUpgrade gdmUpgrade accountsservice-libsUpgrade gnome-shell-extension-user-themeUpgrade gsettings-desktop-schemasUpgrade webkit2gtk3-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-dash-to-dockUpgrade mutter-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-places-menuUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-systemMonitorUpgrade vinoUpgrade LibRaw-develUpgrade gnome-classic-sessionUpgrade gnome-control-center-filesystemUpgrade gnome-online-accounts-develUpgrade gnome-software-devel | May 4, 2022 | Feb 5, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Feb 5, 2021 |
| Centos_linux | — | Upgrade accountsservice-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-disable-screenshieldUpgrade vinoUpgrade gsettings-desktop-schemasUpgrade gdm-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade vino-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-apps-menuUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-commonUpgrade gnome-classic-sessionUpgrade LibRaw-samples-debuginfoUpgrade mutterUpgrade gnome-software-debugsourceUpgrade vino-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk-update-icon-cache-debuginfoUpgrade mutter-debugsourceUpgrade webkit2gtk3Upgrade gnome-control-centerUpgrade gnome-software-debuginfoUpgrade LibRaw-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-systemMonitorUpgrade gsettings-desktop-schemas-develUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade mutter-tests-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-autoar-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gtk3-tests-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-sessionUpgrade webkit2gtk3-develUpgrade mutter-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-calculatorUpgrade accountsservice-libs-debuginfoUpgrade gnome-online-accountsUpgrade gnome-autoarUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-control-center-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gdmUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-gesture-inhibitorUpgrade accountsserviceUpgrade webkit2gtk3-debugsourceUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-window-listUpgrade LibRawUpgrade gnome-shell-extension-top-iconsUpgrade gnome-softwareUpgrade gnome-shell-extension-window-grouperUpgrade gnome-session-wayland-sessionUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-develUpgrade gtk3-devel-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-control-center-filesystemUpgrade accountsservice-libsUpgrade gnome-shellUpgrade gnome-shell-extension-places-menuUpgrade gtk3-immodules-debuginfoUpgrade gdm-debuginfoUpgrade LibRaw-debugsourceUpgrade gtk3 | Nov 10, 2021 | Feb 5, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Feb 5, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Feb 5, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Feb 5, 2021 |
| Oracle_linux | — | Upgrade gnome-software-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-drive-menuUpgrade gnome-session-wayland-sessionUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-windowsNavigatorUpgrade mutterUpgrade accountsservice-libsUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-workspace-indicatorUpgrade gsettings-desktop-schemas-develUpgrade gnome-settings-daemonUpgrade webkit2gtk3Upgrade gtk3Upgrade gnome-calculatorUpgrade gnome-shell-extension-window-grouperUpgrade accountsserviceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-sessionUpgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3-immodule-ximUpgrade gnome-control-center-filesystemUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-places-menuUpgrade mutter-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-online-accountsUpgrade accountsservice-develUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-window-listUpgrade gnome-control-centerUpgrade gnome-session-kiosk-sessionUpgrade gnome-softwareUpgrade gnome-autoarUpgrade LibRawUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-commonUpgrade gdmUpgrade gnome-shell-extension-dash-to-dockUpgrade vinoUpgrade gtk3-develUpgrade gnome-classic-sessionUpgrade LibRaw-develUpgrade gsettings-desktop-schemasUpgrade webkit2gtk3-develUpgrade gnome-shell | Nov 17, 2021 | Nov 6, 2020 |
| Redhat_linux | — | Upgrade gnome-software-debugsourceUpgrade gnome-control-center-filesystemUpgrade gnome-control-centerUpgrade webkit2gtk3-jsc-develUpgrade gnome-online-accounts-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-window-grouperUpgrade LibRaw-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade mutter-debuginfoUpgrade gtk3Upgrade gnome-autoar-debuginfoUpgrade gnome-softwareUpgrade gnome-control-center-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gdm-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade accountsservice-libsUpgrade gnome-software-develUpgrade accountsservice-debugsourceUpgrade mutter-tests-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade LibRawUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3Upgrade gtk3-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gtk-update-icon-cacheUpgrade mutter-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-extension-native-window-placementUpgrade mutter-develUpgrade gnome-shell-extension-dash-to-dockUpgrade accountsservice-libs-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade gtk3-immodules-debuginfoUpgrade mutterUpgrade accountsserviceUpgrade gnome-online-accounts-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-user-themeUpgrade gnome-shellUpgrade vino-debugsourceUpgrade webkit2gtk3-develUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gdm-debugsourceUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade vino-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gsettings-desktop-schemasUpgrade gnome-autoarUpgrade gnome-online-accountsUpgrade gnome-sessionUpgrade gtk3-devel-debuginfoUpgrade accountsservice-develUpgrade webkit2gtk3-jscUpgrade gnome-online-accounts-develUpgrade gnome-autoar-debugsourceUpgrade accountsservice-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-kiosk-sessionUpgrade webkit2gtk3-devel-debuginfoUpgrade LibRaw-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gtk3-develUpgrade vinoUpgrade gnome-shell-extension-window-listUpgrade gnome-classic-sessionUpgrade gnome-settings-daemonUpgrade LibRaw-debugsourceUpgrade gnome-calculatorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-calculator-debuginfoUpgrade gnome-session-debuginfoUpgrade gdmUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk-update-icon-cache-debuginfo | Nov 10, 2021 | Feb 5, 2021 |
| Rocky_linux | — | Upgrade gnome-control-center-debugsourceUpgrade gnome-shell-debugsourceUpgrade mutterUpgrade LibRaw-debugsourceUpgrade webkit2gtk3-jscUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-wayland-sessionUpgrade gtk3-devel-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-software-develUpgrade mutter-develUpgrade gdm-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-shell-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gnome-session-debugsourceUpgrade webkit2gtk3-develUpgrade gtk3-immodule-ximUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3Upgrade LibRaw-debuginfoUpgrade accountsservice-develUpgrade accountsservice-libs-debuginfoUpgrade vino-debuginfoUpgrade gnome-autoarUpgrade gnome-software-debugsourceUpgrade gdmUpgrade LibRawUpgrade gnome-online-accounts-develUpgrade gnome-softwareUpgrade gtk3Upgrade mutter-debugsourceUpgrade accountsserviceUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shellUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-settings-daemonUpgrade gtk3-immodule-xim-debuginfoUpgrade accountsservice-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade LibRaw-develUpgrade gnome-calculator-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gdm-debugsourceUpgrade gtk3-develUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-online-accountsUpgrade gnome-calculator-debugsourceUpgrade gnome-autoar-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gnome-control-centerUpgrade gnome-session-debuginfoUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade gsettings-desktop-schemasUpgrade vino-debugsourceUpgrade mutter-debuginfoUpgrade vinoUpgrade gtk3-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-calculatorUpgrade accountsservice-libsUpgrade gnome-session | Mar 12, 2024 | Feb 5, 2021 |
| Suse | — | Upgrade gnome-autoar-develUpgrade libgnome-autoar-0-0Upgrade typelib-1_0-gnomeautoar-0_1Upgrade libgnome-autoar-gtk-0-0Upgrade typelib-1_0-gnomeautoargtk-0_1 | Mar 7, 2021 | Feb 5, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-0-0Upgrade libgnome-autoar-gtk-0-0 | Feb 12, 2021 | Feb 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub