autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gtk3Upgrade gnome-control-centerUpgrade mutterUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-calculatorUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsserviceUpgrade gnome-session-kiosk-sessionUpgrade gnome-shell-extension-window-grouperUpgrade gnome-sessionUpgrade gnome-autoarUpgrade gnome-online-accountsUpgrade gnome-session-xsessionUpgrade LibRawUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-window-listUpgrade webkit2gtk3Upgrade gnome-session-wayland-sessionUpgrade gtk3-develUpgrade gsettings-desktop-schemasUpgrade vinoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-disable-screenshieldUpgrade mutter-develUpgrade accountsservice-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-places-menuUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-dash-to-dockUpgrade gsettings-desktop-schemas-develUpgrade gnome-shellUpgrade gdmUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-control-center-filesystemUpgrade gnome-settings-daemonUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-apps-menuUpgrade accountsservice-libsUpgrade webkit2gtk3-jscUpgrade gnome-software-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-softwareUpgrade gnome-online-accounts-develUpgrade gtk-update-icon-cacheUpgrade webkit2gtk3-develUpgrade LibRaw-devel | May 4, 2022 | Feb 5, 2021 |
| Alpine Linux | — | Upgrade gnome-autoar | Aug 22, 2024 | Feb 5, 2021 |
| Centos_linux | — | Upgrade gnome-autoar-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-control-center-debugsourceUpgrade vino-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-drive-menuUpgrade gnome-autoar-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-calculator-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade gdm-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade mutterUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade accountsservice-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade mutter-debugsourceUpgrade gtk3-tests-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-debuginfoUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade accountsservice-debugsourceUpgrade webkit2gtk3Upgrade gnome-control-centerUpgrade gtk3-debuginfoUpgrade LibRaw-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-systemMonitorUpgrade gsettings-desktop-schemas-develUpgrade webkit2gtk3-jscUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade vino-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-commonUpgrade mutter-tests-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-session-xsessionUpgrade vinoUpgrade gnome-settings-daemonUpgrade gtk3-devel-debuginfoUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-softwareUpgrade accountsserviceUpgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gnome-session-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-online-accounts-develUpgrade accountsservice-libsUpgrade gnome-calculatorUpgrade accountsservice-libs-debuginfoUpgrade webkit2gtk3-develUpgrade gtk3-develUpgrade gnome-shell-extension-window-listUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-window-grouperUpgrade gtk3-immodules-debuginfoUpgrade gtk3Upgrade gnome-shellUpgrade gdm-debuginfoUpgrade LibRaw-debugsourceUpgrade gnome-shell-extension-places-menuUpgrade gnome-session-debugsourceUpgrade gdmUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-sessionUpgrade LibRawUpgrade gnome-session-wayland-sessionUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk-update-icon-cacheUpgrade mutter-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-control-center-debuginfoUpgrade gnome-online-accountsUpgrade gnome-autoarUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-gesture-inhibitor | Nov 10, 2021 | Feb 5, 2021 |
| Debian | — | Upgrade gnome-autoar | Jul 30, 2024 | Feb 5, 2021 |
| Gentoo Linux | — | Upgrade app-arch/gnome-autoar. | May 28, 2021 | Feb 5, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gnome-autoar to version 0.3.1-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Feb 5, 2021 |
| Oracle_linux | — | Upgrade webkit2gtk3-jscUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-centerUpgrade gnome-shell-extension-window-listUpgrade gtk3-develUpgrade gnome-online-accountsUpgrade gnome-classic-sessionUpgrade LibRaw-develUpgrade vinoUpgrade accountsservice-develUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-top-iconsUpgrade LibRawUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-places-menuUpgrade gnome-shellUpgrade webkit2gtk3-develUpgrade gnome-online-accounts-develUpgrade gdmUpgrade gnome-session-kiosk-sessionUpgrade gsettings-desktop-schemasUpgrade gnome-softwareUpgrade mutter-develUpgrade gnome-shell-extension-dash-to-dockUpgrade gnome-autoarUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-systemMonitorUpgrade accountsserviceUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-launch-new-instanceUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-drive-menuUpgrade mutterUpgrade gtk3Upgrade webkit2gtk3Upgrade gnome-calculatorUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-window-grouperUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-panel-favoritesUpgrade accountsservice-libsUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-software-develUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-session-xsessionUpgrade gnome-shell-extension-apps-menuUpgrade gnome-sessionUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk3-immodule-ximUpgrade gnome-session-wayland-session | Nov 17, 2021 | Nov 6, 2020 |
| Redhat_linux | — | Upgrade gnome-settings-daemonUpgrade gsettings-desktop-schemasUpgrade vino-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-desktop-iconsUpgrade webkit2gtk3-develUpgrade gtk3-devel-debuginfoUpgrade gnome-autoarUpgrade gnome-sessionUpgrade gnome-session-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-online-accounts-develUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-autoar-debugsourceUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade accountsservice-debuginfoUpgrade gdmUpgrade LibRaw-develUpgrade gtk3-debuginfoUpgrade gdm-debugsourceUpgrade gnome-shell-debugsourceUpgrade vino-debugsourceUpgrade gnome-shell-extension-gesture-inhibitorUpgrade gnome-session-kiosk-sessionUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-online-accountsUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade gnome-shell-extension-places-menuUpgrade gtk3-tests-debuginfoUpgrade gnome-classic-sessionUpgrade LibRaw-debugsourceUpgrade gnome-shell-extension-window-listUpgrade gnome-shellUpgrade vinoUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jscUpgrade accountsservice-develUpgrade gnome-calculatorUpgrade gtk3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-calculator-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk-update-icon-cacheUpgrade mutter-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade gnome-shell-debuginfoUpgrade accountsserviceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade mutterUpgrade gnome-online-accounts-debuginfoUpgrade webkit2gtk3Upgrade accountsservice-debugsourceUpgrade gnome-shell-extension-dash-to-dockUpgrade gdm-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade gtk3-immodule-ximUpgrade LibRaw-debuginfoUpgrade gtk3Upgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-drive-menuUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-windowsNavigatorUpgrade mutter-develUpgrade accountsservice-libs-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade LibRaw-samples-debuginfoUpgrade accountsservice-libsUpgrade LibRawUpgrade webkit2gtk3-debugsourceUpgrade mutter-tests-debuginfoUpgrade gnome-autoar-debuginfoUpgrade mutter-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-software-debugsourceUpgrade gnome-session-xsessionUpgrade gnome-session-wayland-sessionUpgrade gnome-control-centerUpgrade gsettings-desktop-schemas-develUpgrade gnome-session-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-online-accounts-debugsourceUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-calculator-debugsourceUpgrade gnome-software-develUpgrade gnome-softwareUpgrade gnome-shell-extension-native-window-placementUpgrade gnome-shell-extension-apps-menuUpgrade gtk3-debugsourceUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3-jsc-develUpgrade gnome-control-center-filesystem | Nov 10, 2021 | Feb 5, 2021 |
| Rocky_linux | — | Upgrade vino-debugsourceUpgrade gnome-calculator-debuginfoUpgrade gtk-update-icon-cacheUpgrade mutter-debuginfoUpgrade LibRaw-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gsettings-desktop-schemasUpgrade gnome-settings-daemonUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shellUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-sessionUpgrade accountsservice-debuginfoUpgrade gnome-online-accounts-debuginfoUpgrade gtk3-develUpgrade gnome-control-centerUpgrade gnome-settings-daemon-debugsourceUpgrade webkit2gtk3-jsc-develUpgrade webkit2gtk3-debugsourceUpgrade gdm-debugsourceUpgrade gnome-session-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-online-accountsUpgrade gnome-autoar-debuginfoUpgrade gnome-session-xsessionUpgrade gnome-online-accounts-debugsourceUpgrade gnome-calculatorUpgrade gnome-calculator-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade vinoUpgrade gtk3-debuginfoUpgrade accountsserviceUpgrade gnome-autoar-debugsourceUpgrade accountsservice-libsUpgrade gdmUpgrade gtk3-immodule-ximUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-debugsourceUpgrade gtk3-devel-debuginfoUpgrade accountsservice-develUpgrade webkit2gtk3-develUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3Upgrade gnome-autoarUpgrade gtk3Upgrade mutter-develUpgrade gtk3-debugsourceUpgrade gnome-softwareUpgrade gnome-online-accounts-develUpgrade LibRaw-debuginfoUpgrade LibRawUpgrade gnome-software-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-session-kiosk-sessionUpgrade gnome-session-debugsourceUpgrade gnome-software-develUpgrade gnome-software-debuginfoUpgrade vino-debuginfoUpgrade mutter-debugsourceUpgrade mutterUpgrade LibRaw-debugsourceUpgrade gnome-session-wayland-sessionUpgrade gsettings-desktop-schemas-develUpgrade gnome-control-center-debugsourceUpgrade gnome-settings-daemon-debuginfoUpgrade gnome-control-center-debuginfoUpgrade webkit2gtk3-jscUpgrade gtk-update-icon-cache-debuginfoUpgrade gdm-debuginfo | Mar 12, 2024 | Feb 5, 2021 |
| Suse | — | Upgrade gnome-autoar-develUpgrade typelib-1_0-gnomeautoargtk-0_1Upgrade libgnome-autoar-0-0Upgrade typelib-1_0-gnomeautoar-0_1Upgrade libgnome-autoar-gtk-0-0 | Mar 7, 2021 | Feb 5, 2021 |
| Ubuntu | — | Upgrade libgnome-autoar-0-0Upgrade libgnome-autoar-gtk-0-0 | Feb 12, 2021 | Feb 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub