autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade webkit2gtk3Upgrade gnome-online-accounts-develUpgrade accountsservice-libsUpgrade gnome-shell-extension-launch-new-instanceUpgrade gdmUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shellUpgrade gnome-session-xsessionUpgrade accountsservice-develUpgrade gnome-session-wayland-sessionUpgrade gsettings-desktop-schemas-develUpgrade mutter-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-native-window-placementUpgrade gtk-update-icon-cacheUpgrade gtk3-develUpgrade gnome-shell-extension-apps-menuUpgrade vinoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-classic-sessionUpgrade gnome-sessionUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-places-menuUpgrade gtk3Upgrade accountsserviceUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-calculatorUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-window-listUpgrade LibRaw-develUpgrade gtk3-immodule-ximUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-updates-dialogUpgrade LibRawUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-disable-screenshieldUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-control-centerUpgrade gnome-shell-extension-top-iconsUpgrade mutterUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-drive-menuUpgrade gnome-online-accountsUpgrade gnome-software-develUpgrade gnome-softwareUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-autoarUpgrade webkit2gtk3-devel | May 4, 2022 | Mar 17, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Mar 17, 2021 |
| Centos_linux | — | Upgrade gnome-classic-sessionUpgrade mutter-tests-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-workspace-indicatorUpgrade gtk3-immodules-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-software-debuginfoUpgrade vino-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gdmUpgrade gnome-control-center-filesystemUpgrade accountsservice-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-commonUpgrade LibRaw-samples-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-debuginfoUpgrade gdm-debugsourceUpgrade gnome-shellUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-launch-new-instanceUpgrade accountsservice-libs-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-softwareUpgrade gtk3-debuginfoUpgrade LibRawUpgrade gnome-session-kiosk-sessionUpgrade mutter-debugsourceUpgrade accountsservice-libsUpgrade gnome-shell-extension-disable-screenshieldUpgrade gsettings-desktop-schemas-develUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-places-menuUpgrade gtk-update-icon-cacheUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-user-themeUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade vinoUpgrade webkit2gtk3Upgrade gsettings-desktop-schemasUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-apps-menuUpgrade gnome-autoarUpgrade gnome-sessionUpgrade gnome-autoar-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-settings-daemonUpgrade gdm-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-software-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-online-accounts-debuginfoUpgrade webkit2gtk3-develUpgrade mutterUpgrade vino-debugsourceUpgrade gtk3-devel-debuginfoUpgrade gtk3-develUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-session-debuginfoUpgrade gnome-calculatorUpgrade gnome-online-accountsUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-window-grouperUpgrade gnome-control-centerUpgrade webkit2gtk3-jsc-develUpgrade LibRaw-debugsourceUpgrade LibRaw-debuginfoUpgrade gtk3Upgrade gnome-shell-extension-top-iconsUpgrade gtk3-tests-debuginfoUpgrade mutter-debuginfoUpgrade gnome-session-wayland-sessionUpgrade accountsserviceUpgrade accountsservice-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-window-listUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-gesture-inhibitor | Nov 10, 2021 | Mar 17, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Mar 17, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Mar 17, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnome-autoar | May 18, 2021 | Mar 17, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 17, 2021 |
| Oracle_linux | — | Upgrade webkit2gtk3-jscUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-apps-menuUpgrade mutterUpgrade mutter-develUpgrade gtk3Upgrade gnome-softwareUpgrade gdmUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-autoarUpgrade LibRawUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-window-listUpgrade gnome-software-develUpgrade gnome-session-kiosk-sessionUpgrade gtk3-immodule-ximUpgrade webkit2gtk3Upgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shellUpgrade accountsservice-develUpgrade gnome-online-accounts-develUpgrade gnome-classic-sessionUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-window-grouperUpgrade gnome-session-wayland-sessionUpgrade accountsserviceUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk-update-icon-cacheUpgrade gtk3-develUpgrade gnome-sessionUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-online-accountsUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-dash-to-dockUpgrade accountsservice-libsUpgrade gnome-calculatorUpgrade vinoUpgrade gnome-session-xsessionUpgrade gnome-control-centerUpgrade LibRaw-develUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-settings-daemon | Nov 17, 2021 | Mar 1, 2021 |
| Redhat_linux | — | Upgrade gnome-software-develUpgrade gnome-session-wayland-sessionUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-native-window-placementUpgrade webkit2gtk3Upgrade gnome-settings-daemon-debuginfoUpgrade gdm-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-window-listUpgrade webkit2gtk3-develUpgrade gnome-sessionUpgrade gnome-control-center-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-softwareUpgrade gnome-autoar-debugsourceUpgrade LibRawUpgrade gnome-software-debugsourceUpgrade gsettings-desktop-schemasUpgrade mutter-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade accountsservice-develUpgrade gnome-session-kiosk-sessionUpgrade LibRaw-debuginfoUpgrade accountsserviceUpgrade gnome-shell-debuginfoUpgrade mutter-tests-debuginfoUpgrade mutter-develUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-session-debugsourceUpgrade accountsservice-debugsourceUpgrade mutterUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-control-centerUpgrade gnome-online-accounts-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gdm-debugsourceUpgrade accountsservice-libsUpgrade gnome-shellUpgrade gnome-shell-extension-window-grouperUpgrade gtk3Upgrade gnome-shell-extension-no-hot-cornerUpgrade webkit2gtk3-jsc-develUpgrade vino-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-develUpgrade vinoUpgrade gnome-autoarUpgrade gtk3-debuginfoUpgrade gnome-calculatorUpgrade gdmUpgrade gnome-autoar-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade LibRaw-samples-debuginfoUpgrade gnome-session-xsessionUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-jscUpgrade gtk3-immodules-debuginfoUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-shell-debugsourceUpgrade gnome-settings-daemonUpgrade mutter-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gtk-update-icon-cache-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade vino-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-online-accounts-debugsourceUpgrade LibRaw-develUpgrade gtk-update-icon-cacheUpgrade gtk3-tests-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-online-accountsUpgrade gnome-shell-extension-drive-menuUpgrade gnome-session-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade gnome-classic-sessionUpgrade gtk3-debugsourceUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gnome-online-accounts-devel | Nov 10, 2021 | Mar 17, 2021 |
| Rocky_linux | — | Upgrade gnome-autoarUpgrade webkit2gtk3-jscUpgrade gnome-shell-debugsourceUpgrade vino-debuginfoUpgrade gdm-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-session-debuginfoUpgrade vinoUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-debuginfoUpgrade LibRaw-develUpgrade gdmUpgrade webkit2gtk3-debuginfoUpgrade gnome-software-develUpgrade gtk-update-icon-cache-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade mutterUpgrade gnome-softwareUpgrade gnome-autoar-debugsourceUpgrade mutter-debugsourceUpgrade gnome-calculator-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade mutter-develUpgrade accountsservice-libs-debuginfoUpgrade gnome-control-centerUpgrade gnome-online-accountsUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade webkit2gtk3-develUpgrade accountsservice-debugsourceUpgrade LibRawUpgrade gnome-control-center-debuginfoUpgrade gtk3-develUpgrade gnome-autoar-debuginfoUpgrade accountsservice-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gdm-debuginfoUpgrade gnome-session-wayland-sessionUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade accountsserviceUpgrade gnome-sessionUpgrade gnome-calculator-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade LibRaw-debuginfoUpgrade gnome-settings-daemonUpgrade mutter-debuginfoUpgrade gnome-software-debugsourceUpgrade accountsservice-libsUpgrade gnome-shellUpgrade accountsservice-develUpgrade LibRaw-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-shell-debuginfoUpgrade gnome-session-debugsourceUpgrade gnome-calculatorUpgrade gnome-online-accounts-develUpgrade gtk3Upgrade gtk3-debugsourceUpgrade gtk3-devel-debuginfoUpgrade vino-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-session-xsessionUpgrade webkit2gtk3 | Mar 12, 2024 | Mar 17, 2021 |
| Suse | — | Upgrade libgnome-autoar-0-0Upgrade libgnome-autoar-gtk-0-0Upgrade typelib-1_0-gnomeautoar-0_1Upgrade typelib-1_0-gnomeautoargtk-0_1Upgrade gnome-autoar-devel | Oct 26, 2022 | Mar 17, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-gtk-0-0Upgrade libgnome-autoar-0-0 | May 7, 2021 | Mar 17, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub