autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-autoarUpgrade mutterUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-online-accountsUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-window-listUpgrade accountsserviceUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-session-kiosk-sessionUpgrade gnome-session-xsessionUpgrade gnome-control-centerUpgrade gtk3Upgrade gnome-shell-extension-drive-menuUpgrade gtk3-develUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-horizontal-workspacesUpgrade webkit2gtk3Upgrade gnome-session-wayland-sessionUpgrade gnome-sessionUpgrade gnome-shell-extension-gesture-inhibitorUpgrade LibRawUpgrade gnome-calculatorUpgrade gdmUpgrade gnome-softwareUpgrade gnome-shell-extension-user-themeUpgrade mutter-develUpgrade vinoUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-software-develUpgrade accountsservice-libsUpgrade gnome-shell-extension-apps-menuUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-places-menuUpgrade accountsservice-develUpgrade gnome-shell-extension-systemMonitorUpgrade gsettings-desktop-schemas-develUpgrade gnome-shellUpgrade gnome-shell-extension-dash-to-dockUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-workspace-indicatorUpgrade LibRaw-develUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-top-iconsUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-classic-sessionUpgrade gtk3-immodule-ximUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3-jsc | May 4, 2022 | Feb 5, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Feb 5, 2021 |
| Centos_linux | — | Upgrade LibRawUpgrade gnome-sessionUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-online-accountsUpgrade mutter-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-autoarUpgrade gnome-shell-extension-window-listUpgrade gtk3-develUpgrade gnome-shell-extension-window-grouperUpgrade webkit2gtk3-develUpgrade gnome-control-center-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-softwareUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk3-debugsourceUpgrade gnome-online-accounts-develUpgrade accountsserviceUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-top-iconsUpgrade gnome-session-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-shellUpgrade gnome-shell-extension-places-menuUpgrade gdm-debuginfoUpgrade gtk-update-icon-cacheUpgrade gtk3Upgrade gtk3-devel-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-session-wayland-sessionUpgrade gtk3-immodules-debuginfoUpgrade gnome-calculatorUpgrade accountsservice-libsUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-panel-favoritesUpgrade gdmUpgrade gnome-calculator-debuginfoUpgrade gnome-session-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade vino-debuginfoUpgrade gnome-session-xsessionUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-classic-sessionUpgrade vinoUpgrade gnome-shell-extension-apps-menuUpgrade LibRaw-samples-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-debugsourceUpgrade webkit2gtk3-debuginfoUpgrade accountsservice-debugsourceUpgrade mutter-tests-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade vino-debugsourceUpgrade gtk3-immodule-ximUpgrade gnome-calculator-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-autoar-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jscUpgrade mutterUpgrade gnome-shell-extension-windowsNavigatorUpgrade LibRaw-debuginfoUpgrade gtk3-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-control-centerUpgrade webkit2gtk3Upgrade gnome-settings-daemonUpgrade gtk3-tests-debuginfoUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade mutter-debugsource | Nov 10, 2021 | Feb 5, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Feb 5, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Feb 5, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Feb 5, 2021 |
| Oracle_linux | — | Upgrade vinoUpgrade webkit2gtk3-develUpgrade gnome-online-accounts-develUpgrade gdmUpgrade gnome-softwareUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-session-kiosk-sessionUpgrade LibRaw-develUpgrade gnome-shellUpgrade gnome-online-accountsUpgrade gnome-shell-extension-window-listUpgrade gsettings-desktop-schemasUpgrade LibRawUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-commonUpgrade gnome-control-centerUpgrade accountsservice-develUpgrade gnome-shell-extension-top-iconsUpgrade mutter-develUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-classic-sessionUpgrade gtk3-develUpgrade gnome-shell-extension-places-menuUpgrade gnome-autoarUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-panel-favoritesUpgrade accountsservice-libsUpgrade gnome-software-develUpgrade gnome-shell-extension-apps-menuUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-no-hot-cornerUpgrade webkit2gtk3Upgrade gnome-settings-daemonUpgrade gnome-calculatorUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-jsc-develUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-sessionUpgrade accountsserviceUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-session-wayland-sessionUpgrade mutterUpgrade gtk3 | Nov 17, 2021 | Nov 6, 2020 |
| Redhat_linux | — | Upgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-dash-to-dockUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade mutter-develUpgrade gtk3-immodule-ximUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-commonUpgrade LibRawUpgrade gdm-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-software-debugsourceUpgrade gnome-session-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-control-center-debugsourceUpgrade mutterUpgrade gnome-shell-extension-workspace-indicatorUpgrade webkit2gtk3Upgrade webkit2gtk3-debuginfoUpgrade mutter-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gnome-control-centerUpgrade gnome-control-center-filesystemUpgrade webkit2gtk3-jsc-develUpgrade mutter-debugsourceUpgrade gnome-calculator-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-systemMonitorUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade gnome-softwareUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk3-immodules-debuginfoUpgrade gnome-software-develUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3Upgrade gtk3-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-windowsNavigatorUpgrade mutter-tests-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gtk-update-icon-cacheUpgrade accountsserviceUpgrade accountsservice-libsUpgrade gnome-settings-daemon-debugsourceUpgrade vinoUpgrade gnome-shellUpgrade gdmUpgrade gnome-shell-extension-panel-favoritesUpgrade vino-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-window-listUpgrade accountsservice-develUpgrade webkit2gtk3-devel-debuginfoUpgrade gtk3-develUpgrade gnome-online-accountsUpgrade gnome-sessionUpgrade gsettings-desktop-schemasUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-debuginfoUpgrade vino-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-disable-screenshieldUpgrade gdm-debugsourceUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-debugsourceUpgrade LibRaw-develUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-classic-sessionUpgrade gnome-autoarUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-places-menuUpgrade gtk3-devel-debuginfoUpgrade gnome-settings-daemonUpgrade LibRaw-debugsourceUpgrade webkit2gtk3-develUpgrade gnome-session-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-calculatorUpgrade gtk3-tests-debuginfoUpgrade webkit2gtk3-jscUpgrade gtk-update-icon-cache-debuginfo | Nov 10, 2021 | Feb 5, 2021 |
| Rocky_linux | — | Upgrade LibRawUpgrade gnome-softwareUpgrade gnome-online-accounts-develUpgrade vino-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-session-xsessionUpgrade gtk3-debuginfoUpgrade accountsservice-libsUpgrade gnome-calculator-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-settings-daemonUpgrade gsettings-desktop-schemasUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade accountsservice-debuginfoUpgrade mutter-debuginfoUpgrade vino-debugsourceUpgrade gdm-debugsourceUpgrade gnome-online-accountsUpgrade gnome-shellUpgrade accountsserviceUpgrade gnome-settings-daemon-debugsourceUpgrade gtk-update-icon-cacheUpgrade gnome-calculatorUpgrade vinoUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-sessionUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-control-centerUpgrade LibRaw-develUpgrade gnome-session-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-online-accounts-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gtk3-develUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3Upgrade gnome-software-debugsourceUpgrade gtk3Upgrade accountsservice-libs-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-software-develUpgrade gnome-autoarUpgrade mutter-debugsourceUpgrade webkit2gtk3-jscUpgrade gtk-update-icon-cache-debuginfoUpgrade gdm-debuginfoUpgrade webkit2gtk3-develUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-debugsourceUpgrade gnome-control-center-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gdmUpgrade accountsservice-develUpgrade mutterUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-wayland-sessionUpgrade LibRaw-debugsourceUpgrade gnome-session-debugsourceUpgrade mutter-develUpgrade gnome-software-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gtk3-debugsourceUpgrade LibRaw-debuginfo | Mar 12, 2024 | Feb 5, 2021 |
| Suse | — | Upgrade libgnome-autoar-0-0Upgrade gnome-autoar-develUpgrade libgnome-autoar-gtk-0-0Upgrade typelib-1_0-gnomeautoargtk-0_1Upgrade typelib-1_0-gnomeautoar-0_1 | Mar 7, 2021 | Feb 5, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-0-0Upgrade libgnome-autoar-gtk-0-0 | Feb 12, 2021 | Feb 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub