autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-software-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-places-menuUpgrade webkit2gtk3-jscUpgrade gdmUpgrade gnome-softwareUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-commonUpgrade accountsservice-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-user-themeUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-disable-screenshieldUpgrade gtk3-immodule-ximUpgrade webkit2gtk3-develUpgrade gsettings-desktop-schemas-develUpgrade gnome-shellUpgrade mutter-develUpgrade accountsservice-libsUpgrade LibRaw-develUpgrade vinoUpgrade gsettings-desktop-schemasUpgrade gnome-control-center-filesystemUpgrade gnome-settings-daemonUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-classic-sessionUpgrade gnome-sessionUpgrade gnome-session-wayland-sessionUpgrade gnome-online-accountsUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-control-centerUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-gesture-inhibitorUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-drive-menuUpgrade gnome-session-kiosk-sessionUpgrade mutterUpgrade gnome-shell-extension-window-grouperUpgrade gtk3Upgrade LibRawUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-calculatorUpgrade accountsserviceUpgrade webkit2gtk3Upgrade gnome-autoarUpgrade gtk3-devel | May 4, 2022 | Feb 5, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Feb 5, 2021 |
| Centos_linux | — | Upgrade gtk-update-icon-cacheUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-updates-dialogUpgrade accountsservice-libs-debuginfoUpgrade gnome-softwareUpgrade webkit2gtk3-develUpgrade gnome-control-center-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-online-accountsUpgrade gnome-shell-extension-top-iconsUpgrade gnome-session-debugsourceUpgrade accountsservice-libsUpgrade gdmUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-session-debuginfoUpgrade gtk3-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade accountsserviceUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-sessionUpgrade gtk3-devel-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-native-window-placementUpgrade gtk3-develUpgrade gtk3-immodules-debuginfoUpgrade mutter-debuginfoUpgrade gtk3Upgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-places-menuUpgrade gdm-debuginfoUpgrade gnome-shellUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-control-center-filesystemUpgrade LibRaw-debugsourceUpgrade gnome-autoarUpgrade gnome-shell-extension-window-grouperUpgrade gnome-calculatorUpgrade LibRawUpgrade mutter-debugsourceUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-drive-menuUpgrade mutter-tests-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-classic-sessionUpgrade vinoUpgrade gnome-shell-extension-windowsNavigatorUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-jscUpgrade vino-debugsourceUpgrade gtk3-immodule-ximUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-session-xsessionUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-apps-menuUpgrade gnome-shell-extension-disable-screenshieldUpgrade webkit2gtk3Upgrade gtk3-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-control-centerUpgrade LibRaw-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade gnome-settings-daemonUpgrade accountsservice-debugsourceUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-session-kiosk-sessionUpgrade gnome-online-accounts-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-debugsourceUpgrade gnome-software-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade vino-debuginfoUpgrade mutterUpgrade LibRaw-samples-debuginfoUpgrade gnome-autoar-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gtk3-immodule-xim-debuginfo | Nov 10, 2021 | Feb 5, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Feb 5, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Feb 5, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Feb 5, 2021 |
| Oracle_linux | — | Upgrade gnome-shell-extension-native-window-placementUpgrade webkit2gtk3-jsc-develUpgrade gnome-software-develUpgrade gnome-shell-extension-systemMonitorUpgrade mutterUpgrade gtk-update-icon-cacheUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-windowsNavigatorUpgrade accountsservice-libsUpgrade accountsserviceUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-sessionUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-apps-menuUpgrade gtk3-immodule-ximUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-calculatorUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-drive-menuUpgrade gtk3Upgrade webkit2gtk3Upgrade gnome-shell-extension-launch-new-instanceUpgrade gsettings-desktop-schemas-develUpgrade LibRaw-develUpgrade gnome-softwareUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-top-iconsUpgrade mutter-develUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-autoarUpgrade gnome-shell-extension-commonUpgrade gnome-shellUpgrade gnome-online-accounts-develUpgrade webkit2gtk3-develUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-online-accountsUpgrade LibRawUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-window-listUpgrade webkit2gtk3-jscUpgrade gnome-control-centerUpgrade gnome-classic-sessionUpgrade accountsservice-develUpgrade vinoUpgrade gtk3-develUpgrade gdmUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-session-kiosk-session | Nov 17, 2021 | Nov 6, 2020 |
| Redhat_linux | — | Upgrade gnome-shell-extension-window-grouperUpgrade gnome-session-xsessionUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-apps-menuUpgrade gnome-control-center-debugsourceUpgrade gnome-control-center-filesystemUpgrade LibRawUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3-debugsourceUpgrade mutter-develUpgrade gnome-control-centerUpgrade gnome-shell-debuginfoUpgrade gnome-autoar-debuginfoUpgrade gdm-debuginfoUpgrade gnome-session-wayland-sessionUpgrade mutterUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-online-accounts-debugsourceUpgrade gnome-session-debugsourceUpgrade LibRaw-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-libsUpgrade accountsservice-debugsourceUpgrade accountsserviceUpgrade accountsservice-libs-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-commonUpgrade gsettings-desktop-schemas-develUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade mutter-debugsourceUpgrade webkit2gtk3Upgrade gnome-softwareUpgrade mutter-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-software-develUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk3Upgrade gnome-shell-extension-drive-menuUpgrade mutter-tests-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-user-themeUpgrade LibRaw-samples-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk3-immodule-xim-debuginfoUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-session-kiosk-sessionUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-autoar-debugsourceUpgrade gdmUpgrade gnome-session-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-top-iconsUpgrade vino-debuginfoUpgrade gnome-settings-daemonUpgrade vino-debugsourceUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-debugsourceUpgrade gnome-sessionUpgrade gnome-online-accountsUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-devel-debuginfoUpgrade accountsservice-develUpgrade gsettings-desktop-schemasUpgrade gnome-autoarUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-tests-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-calculatorUpgrade webkit2gtk3-develUpgrade gnome-calculator-debuginfoUpgrade gnome-shellUpgrade gnome-shell-extension-window-listUpgrade webkit2gtk3-devel-debuginfoUpgrade vinoUpgrade gtk3-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-debuginfoUpgrade LibRaw-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gnome-online-accounts-devel | Nov 10, 2021 | Feb 5, 2021 |
| Rocky_linux | — | Upgrade gnome-session-wayland-sessionUpgrade accountsservice-develUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3Upgrade LibRaw-debugsourceUpgrade gnome-control-center-debugsourceUpgrade mutterUpgrade gtk-update-icon-cache-debuginfoUpgrade webkit2gtk3-jscUpgrade accountsservice-libs-debuginfoUpgrade gtk3-immodule-ximUpgrade vino-debuginfoUpgrade gnome-autoarUpgrade webkit2gtk3-develUpgrade gnome-softwareUpgrade gnome-software-debugsourceUpgrade gnome-online-accounts-develUpgrade LibRawUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-debugsourceUpgrade gdmUpgrade LibRaw-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade mutter-develUpgrade gnome-shell-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-software-develUpgrade gnome-software-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade mutter-debugsourceUpgrade gdm-debuginfoUpgrade gtk3Upgrade gnome-session-debugsourceUpgrade gtk3-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade mutter-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-session-xsessionUpgrade accountsserviceUpgrade vinoUpgrade accountsservice-libsUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-control-centerUpgrade gdm-debugsourceUpgrade gsettings-desktop-schemasUpgrade gnome-session-debuginfoUpgrade gnome-settings-daemonUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-develUpgrade vino-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade LibRaw-develUpgrade gnome-calculator-debuginfoUpgrade gnome-calculator-debugsourceUpgrade gnome-autoar-debugsourceUpgrade gnome-autoar-debuginfoUpgrade gnome-online-accountsUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shellUpgrade gnome-sessionUpgrade gnome-online-accounts-debuginfoUpgrade accountsservice-debugsourceUpgrade accountsservice-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-calculatorUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-jsc-devel-debuginfo | Mar 12, 2024 | Feb 5, 2021 |
| Suse | — | Upgrade typelib-1_0-gnomeautoargtk-0_1Upgrade libgnome-autoar-gtk-0-0Upgrade gnome-autoar-develUpgrade libgnome-autoar-0-0Upgrade typelib-1_0-gnomeautoar-0_1 | Mar 7, 2021 | Feb 5, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-gtk-0-0Upgrade libgnome-autoar-0-0 | Feb 12, 2021 | Feb 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub