autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-auto-move-windowsUpgrade webkit2gtk3-jsc-develUpgrade LibRawUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-session-kiosk-sessionUpgrade gtk3Upgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-window-grouperUpgrade gnome-sessionUpgrade mutterUpgrade gnome-shell-extension-launch-new-instanceUpgrade accountsserviceUpgrade gnome-online-accountsUpgrade gnome-session-xsessionUpgrade gnome-autoarUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-window-listUpgrade gnome-control-centerUpgrade gnome-session-wayland-sessionUpgrade gtk3-develUpgrade webkit2gtk3Upgrade gnome-shell-extension-drive-menuUpgrade gnome-calculatorUpgrade accountsservice-libsUpgrade gnome-shell-extension-dash-to-dockUpgrade gsettings-desktop-schemas-develUpgrade gnome-shellUpgrade gnome-shell-extension-disable-screenshieldUpgrade gtk3-immodule-ximUpgrade accountsservice-develUpgrade gdmUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-commonUpgrade LibRaw-develUpgrade gnome-shell-extension-top-iconsUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-desktop-iconsUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-windowsNavigatorUpgrade mutter-develUpgrade gnome-softwareUpgrade gnome-settings-daemonUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-systemMonitorUpgrade vinoUpgrade gnome-software-develUpgrade gnome-shell-extension-user-themeUpgrade webkit2gtk3-jscUpgrade gnome-online-accounts-devel | May 4, 2022 | Feb 5, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Feb 5, 2021 |
| Centos_linux | — | Upgrade accountsservice-debugsourceUpgrade gnome-classic-sessionUpgrade mutter-tests-debuginfoUpgrade gnome-settings-daemonUpgrade gnome-software-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-calculator-debugsourceUpgrade gnome-shell-debuginfoUpgrade vino-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3-devel-debuginfoUpgrade vinoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-desktop-iconsUpgrade mutter-debugsourceUpgrade gnome-control-centerUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade accountsservice-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3-debuginfoUpgrade mutterUpgrade gnome-shell-extension-dash-to-dockUpgrade gsettings-desktop-schemas-develUpgrade gtk3-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-autoar-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-xsessionUpgrade webkit2gtk3-jsc-develUpgrade gsettings-desktop-schemasUpgrade gdm-debugsourceUpgrade gnome-software-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3Upgrade gtk3-immodule-xim-debuginfoUpgrade webkit2gtk3-jscUpgrade gtk3-tests-debuginfoUpgrade vino-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gdmUpgrade LibRawUpgrade webkit2gtk3-debugsourceUpgrade gnome-autoarUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-sessionUpgrade webkit2gtk3-develUpgrade gnome-calculatorUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-top-iconsUpgrade gnome-session-debugsourceUpgrade gnome-online-accounts-develUpgrade gnome-control-center-filesystemUpgrade gnome-shellUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-develUpgrade accountsservice-libsUpgrade gtk3-devel-debuginfoUpgrade gnome-session-wayland-sessionUpgrade gnome-softwareUpgrade LibRaw-debugsourceUpgrade gtk-update-icon-cacheUpgrade gdm-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gtk3Upgrade gtk3-debugsourceUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-user-themeUpgrade accountsserviceUpgrade gnome-online-accountsUpgrade webkit2gtk3-jsc-debuginfoUpgrade mutter-debuginfoUpgrade gnome-shell-extension-updates-dialog | Nov 10, 2021 | Feb 5, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Feb 5, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Feb 5, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Feb 5, 2021 |
| Oracle_linux | — | Upgrade gnome-session-xsessionUpgrade mutterUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-user-themeUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-software-develUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3-immodule-ximUpgrade webkit2gtk3-jsc-develUpgrade accountsservice-libsUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-calculatorUpgrade gnome-settings-daemonUpgrade accountsserviceUpgrade webkit2gtk3Upgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-sessionUpgrade gtk3Upgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-window-grouperUpgrade gnome-online-accountsUpgrade accountsservice-develUpgrade gnome-classic-sessionUpgrade gnome-softwareUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-dash-to-dockUpgrade gdmUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-places-menuUpgrade gsettings-desktop-schemasUpgrade gnome-control-centerUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-gesture-inhibitorUpgrade LibRaw-develUpgrade LibRawUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-commonUpgrade gnome-autoarUpgrade webkit2gtk3-develUpgrade gnome-shellUpgrade gnome-online-accounts-develUpgrade mutter-develUpgrade gtk3-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade vino | Nov 17, 2021 | Nov 6, 2020 |
| Redhat_linux | — | Upgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-window-grouperUpgrade gnome-online-accounts-debuginfoUpgrade gnome-software-debugsourceUpgrade gdm-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-control-center-debugsourceUpgrade mutter-debugsourceUpgrade gsettings-desktop-schemas-develUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-auto-move-windowsUpgrade webkit2gtk3-debuginfoUpgrade gnome-control-centerUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-softwareUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-debuginfoUpgrade LibRaw-debuginfoUpgrade accountsservice-libsUpgrade gtk3-immodules-debuginfoUpgrade accountsserviceUpgrade gnome-shell-extension-commonUpgrade accountsservice-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gtk3Upgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-user-themeUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-immodule-ximUpgrade mutter-tests-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3Upgrade LibRaw-samples-debuginfoUpgrade LibRawUpgrade webkit2gtk3-debugsourceUpgrade mutterUpgrade gnome-shell-extension-apps-menuUpgrade gnome-session-wayland-sessionUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade mutter-develUpgrade mutter-debuginfoUpgrade gnome-software-develUpgrade gnome-session-kiosk-sessionUpgrade gnome-control-center-debuginfoUpgrade vino-debuginfoUpgrade gsettings-desktop-schemasUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shellUpgrade webkit2gtk3-jscUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-online-accounts-develUpgrade gnome-calculatorUpgrade webkit2gtk3-develUpgrade gtk3-immodule-xim-debuginfoUpgrade gdmUpgrade gnome-autoar-debugsourceUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-top-iconsUpgrade gnome-settings-daemonUpgrade vino-debugsourceUpgrade LibRaw-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-software-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk3-tests-debuginfoUpgrade gnome-online-accountsUpgrade gnome-sessionUpgrade accountsservice-develUpgrade gnome-autoarUpgrade vinoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-window-listUpgrade gtk3-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-debugsourceUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade LibRaw-develUpgrade gnome-session-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gdm-debugsourceUpgrade gtk3-devel-debuginfo | Nov 10, 2021 | Feb 5, 2021 |
| Rocky_linux | — | Upgrade gnome-calculatorUpgrade gtk3-immodule-xim-debuginfoUpgrade LibRaw-develUpgrade accountsservice-libsUpgrade gnome-calculator-debuginfoUpgrade gnome-settings-daemonUpgrade gsettings-desktop-schemasUpgrade gnome-online-accounts-debugsourceUpgrade gnome-autoar-debugsourceUpgrade gnome-online-accountsUpgrade webkit2gtk3-debugsourceUpgrade gnome-control-centerUpgrade gnome-session-xsessionUpgrade gtk3-debuginfoUpgrade accountsserviceUpgrade mutter-debuginfoUpgrade vinoUpgrade vino-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-settings-daemon-debugsourceUpgrade gtk3-develUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-sessionUpgrade gtk-update-icon-cacheUpgrade gnome-shellUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-session-debugsourceUpgrade gdmUpgrade gnome-autoarUpgrade webkit2gtk3-develUpgrade webkit2gtk3-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gtk3-immodule-ximUpgrade accountsservice-libs-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-jscUpgrade gtk-update-icon-cache-debuginfoUpgrade gdm-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-wayland-sessionUpgrade gnome-control-center-debugsourceUpgrade mutterUpgrade LibRaw-debuginfoUpgrade LibRawUpgrade gnome-softwareUpgrade gnome-online-accounts-develUpgrade mutter-debugsourceUpgrade gtk3Upgrade LibRaw-debugsourceUpgrade gnome-software-debugsourceUpgrade mutter-develUpgrade gtk3-debugsourceUpgrade gnome-software-develUpgrade gnome-shell-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-debugsourceUpgrade accountsservice-develUpgrade vino-debuginfo | Mar 12, 2024 | Feb 5, 2021 |
| Suse | — | Upgrade gnome-autoar-develUpgrade libgnome-autoar-gtk-0-0Upgrade typelib-1_0-gnomeautoargtk-0_1Upgrade libgnome-autoar-0-0Upgrade typelib-1_0-gnomeautoar-0_1 | Mar 7, 2021 | Feb 5, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-0-0Upgrade libgnome-autoar-gtk-0-0 | Feb 12, 2021 | Feb 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub